title: LoopBack filtering for GET /projects
body: <p>With Project.find() or GET /projects I want to get only the current users projects. Where should this filtering be done? I've tried with acls in project.json:</p>
  
  <pre><code>"accessType": "*",
  "principalType": "ROLE",
  "principalId": "teamMember",
  "permission": "ALLOW"
  </code></pre>
  
  <p>and a registered Resolver for that. But I can only get this to work for findById() or GET /projects/:id, not for listing all projects.</p>
  
  <p>I've also tried as an observer in project.js:</p>
  
  <pre><code>Project.observe('access', function(ctx, next){
      ctx.query.where.memberId = 1;
      next();
  });
  </code></pre>
  
  <p>etc ..</p>
  
  <p>How is this supposed to be done? I've also studied Loopbacks tutorial on a similar case here: <a href="http://docs.strongloop.com/display/public/LB/Tutorial%3A+access+control" rel="nofollow">http://docs.strongloop.com/display/public/LB/Tutorial%3A+access+control</a></p>
  
  <p>Although this is not what I am trying to do, I'm stuck :)</p>