Use sql_always_where to apply a query restriction that users cannot change

Follow