correction of paths to ensure they don't see all the users/business/campaigns