TODO: filtrare dupa client; mod user form; security