Can only read messages that you sent or messages sent to you [('to_id.user_ids', 'in', [user.id])] Can only modify your session [('user_ids', 'in', [user.id])] Can only modify your own session relations [('user_id', '=', user.id)]