add to the where clause:
WHERE download_users.UserID = pcms2_users.UserID
another condition:
WHERE download_users.UserID = pcms2_users.UserID AND pcms2_users.UserID = paramUserID
then create a new variable in the recordset as:
name: paramUserID
type: integer
default value: -1
Runtime Value: $_SESSION['<user id session>']
where <user id session> is the name of the session created by the login page to hold the users ID