So could I use the authenticate user server behaviour to achieve this?
And then filter data using the username?
I guess that if I could, when data was submitted it would also need to submit an email address, but then what would happen if the user changed their username....?