\[x\] add user_id to ingress objects
\[x\] restrict retrieval to users own objects
\[\] web frontend stuff