I guess, I’ll answer my own questions. What was missing was the permissions for the role - once I added permissions for user find and fineOne - everything started working. And I find this kinda stupid. Sure, It makes sense to get the data. Sure - don’t show all the data then, just show the user Id, but it makes zero sense for filtering. Why would permissions stop filtering?