When you user logs in are you storing the unique ID for the user in a session variable?
What you need to do is either update your Recordset Select statement to only select records where the UserID = the session that contains the user ID, or apply the Data Assist Search Server behaviour and select to filter the User ID field by the Session Variable.
Cheers