[galaxy-dev] Accessing other users' datasets

Hello, What needs to be configured in order to limit users to their own datasets ? What I mean is that on my local server (using external authentication, but no security groups/roles defined), I can use the following URL to view my datasets; http://rave.cshl.edu/galaxy/datasets/35819/display/index But I can also change the dataset ID and view any other file, regardless of whether it is mine or not. I'd like to block access to other users' datasets (but I prefer not to create specialized roles/groups). Thanks, Gordon.