diff --git a/app/xml_cdr/xml_cdr.php b/app/xml_cdr/xml_cdr.php
index d8b056251f..b45f51cc16 100644
--- a/app/xml_cdr/xml_cdr.php
+++ b/app/xml_cdr/xml_cdr.php
@@ -239,6 +239,9 @@
 		if (permission_exists('xml_cdr_search_extension')) {
 			$sql = "select extension_uuid, extension, number_alias from v_extensions ";
 			$sql .= "where domain_uuid = :domain_uuid ";
+			if (!permission_exists('xml_cdr_domain') && is_array($extension_uuids) && @sizeof($extension_uuids != 0)) {
+				$sql .= "and extension_uuid in ('".implode("','",$extension_uuids)."') "; //only show the user their extensions
+			}
 			$sql .= "order by extension asc, number_alias asc ";
 			$parameters['domain_uuid'] = $_SESSION['domain_uuid'];
 			$database = new database;