# Privacy rules for list data field **URL:** \ **Category:** Need help\ **Created:** [December 22, 2021, 2:30pm UTC](https://forum.bubble.io/t/privacy-rules-for-list-data-field/183328 "2021-12-22T14:30:46Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![sensei01](https://avatars.discourse-cdn.com/v4/letter/s/94ad74/32.png) [@sensei01](https://forum.bubble.io/u/sensei01)\ **Post date:** [December 22, 2021, 2:30pm UTC](https://forum.bubble.io/t/privacy-rules-for-list-data-field/183328/1 "2021-12-22T14:30:46Z")
I have the data type **tasks** which has the data field **list of users**. I want to do a search for tasks whose list of users contains current user. BUT I do not want the search to send back the full list of users but only the user which is the current user. How can I achieve this? ---
**Author:** ![cmarchan](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/cmarchan/32/253062_2.png) [@cmarchan](https://forum.bubble.io/u/cmarchan)\ **Post date:** [December 22, 2021, 4:42pm UTC](https://forum.bubble.io/t/privacy-rules-for-list-data-field/183328/2 "2021-12-22T16:42:37Z")
Hello @sensei01 Would this work? (just replace task for list when you look at it) ![image](https://us1.discourse-cdn.com/bubble/original/3X/0/1/011f2e74c9114cd10641bc98ac1c91fa1ec32a16.png) ---
**Author:** ![sensei01](https://avatars.discourse-cdn.com/v4/letter/s/94ad74/32.png) [@sensei01](https://forum.bubble.io/u/sensei01)\ **Post date:** [December 22, 2021, 4:48pm UTC](https://forum.bubble.io/t/privacy-rules-for-list-data-field/183328/3 "2021-12-22T16:48:15Z")
hmm I am not really sure. The output should be the list of ALL tasks whose list of users contains current user, AND I want the list of users to return only the current user (i.e. if the list of users contains other users I don’t want the backend to send those users). your solution only returns 1 task if I am not wrong? ---
**Author:** ![cmarchan](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/cmarchan/32/253062_2.png) [@cmarchan](https://forum.bubble.io/u/cmarchan)\ **Post date:** [December 22, 2021, 4:53pm UTC](https://forum.bubble.io/t/privacy-rules-for-list-data-field/183328/4 "2021-12-22T16:53:38Z")
Use a repeating group instead with the same expression except :first item ---
**Author:** ![sensei01](https://avatars.discourse-cdn.com/v4/letter/s/94ad74/32.png) [@sensei01](https://forum.bubble.io/u/sensei01)\ **Post date:** [December 22, 2021, 5:01pm UTC](https://forum.bubble.io/t/privacy-rules-for-list-data-field/183328/5 "2021-12-22T17:01:15Z")
Yes, but then I would still have the list of other users 😅. What I want is e.g.: I have a 1. task1 → with list of users = current\_user\_name, name2, name3 2. task2 → with list of users = name2, name3 I want the server to return task1 → with list of users = current\_user\_name ---
**Author:** ![ed727](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/ed727/32/71942_2.png) [@ed727](https://forum.bubble.io/u/ed727)\ **Post date:** [December 22, 2021, 5:02pm UTC](https://forum.bubble.io/t/privacy-rules-for-list-data-field/183328/6 "2021-12-22T17:02:46Z")
> [@sensei01](#): > > I want the list of users to return only the current user (i.e. if the list of users contains other users I don’t want the backend to send those users). If it’s a list field, you can use privacy rules to make that field private or not, but it’s an all or nothing thing, in that if it’s viewable, the whole list will be downloaded as part of the record. This is one of the downsides of list fields. That said, my guess is that the list field would only contain the uniqueID of each related record. So I’d test it and dig around Chrome Dev tools to see if it downloads any sensitive info on users. ---
**Author:** ![system](https://us1.discourse-cdn.com/bubble/original/3X/2/8/2847faa74692c2ffa5d939d3dc3724cdd060d247.png) [@system](https://forum.bubble.io/u/system)\ **Post date:** [March 2, 2022, 2:30pm UTC](https://forum.bubble.io/t/privacy-rules-for-list-data-field/183328/7 "2022-03-02T14:30:59Z")
This topic was automatically closed after 70 days. New replies are no longer allowed.