that means you'd either have to write a relationship between those two users to restrict a permission, or filter yourself after the fact