[PATCH conductor 08/13] restrict hwps retrieved to those user has access to