That recordset is only filtering on the file name, like i have already said, you need to also filter on the User ID.
add the following to the where clause:
AND userdownloadUserID = paramUser
in the variables section, add a new variable as:
Default Value: -1
Runtime Value: $_SESSION['SecurityAssist_UserID']