Limit query results to folders that operator has the read/write access to

hello,

We host a multi-tenant system on ACC, we are facing this issue when an operator of one tenant doing a blank search on schema like subscriptions, recipient tracking logs, etc which are linked to the recipient schema... It resulting in all the data irrespective of the folders that they have access to. but when we do the blank search on the recipient schema it only shows the recipients that the operator have the access to. 

1. Is there any way to extend and imply this limitation of results to the recipient's data which they have the access to?

2. In general, in an input form how to display content only if the operator has the write access?

Please advise.

Thanks in advance.