Security: fix code-behind UserListView_ItemCommand