The AppInstance maintains a query map and users can change their insert site. The SignatureService is responsible for getting the queries a user can access. As users modify queries the cache is rebuilt. You can try and create a qualified data restriction but I'm not sure that it would apply. A default insert site is not a requirement from a Maximo perspective and users often can access multiple sites so that's problematic. For example, if a user has a start center that depends on a query for Site A but their insert site is Site B, you are potentially going to break the start center if Maximo can't fetch the query.
A few years ago, IBM was going to work on enhancements to the query process to enable more granular restrictions (like security/person groups) but that wasn't implemented.
------------------------------
Steven Shull
Naviam
------------------------------