This is a new method that passes the username together with the definition. That way, we can check later whether the user requesting the patient set created from this definition is the same that run query and deny access otherwise.