List privileges on itembox where fixed. Only items in those lists with privs returned where  assigned flag between person's usergroup and workspace exists.