list purchase orders controller can force the owner filter to be the principal of the currently logged in user