Get all models in the Collection that passes the provided filter.
if there is any model in the collection that the user is not allowed to read.