With a product with mutiple variant, we can end in a scenario where a user sees variant associated to producer it doesn't have permission for. This prevents the user from updating any variant. This fix filter out variant a user shoudn't be seeing