diff --git a/commcare_connect/opportunity/api/views.py b/commcare_connect/opportunity/api/views.py
index 33d6d123..7456fdb4 100644
--- a/commcare_connect/opportunity/api/views.py
+++ b/commcare_connect/opportunity/api/views.py
@@ -6,8 +6,8 @@
 
 
 class OpportunityViewSet(viewsets.ReadOnlyModelViewSet):
-    # TODO: Add filtering for CID users
-    queryset = Opportunity.objects.all()
     serializer_class = OpportunitySerializer
-    # TODO: Add permission for CID users
     permission_classes = [IsAuthenticated]
+
+    def get_queryset(self):
+        return Opportunity.objects.filter(opportunityaccess__user=self.request.user)
diff --git a/config/api_router.py b/config/api_router.py
index 621355bc..530c5cfa 100644
--- a/config/api_router.py
+++ b/config/api_router.py
@@ -12,7 +12,7 @@
     router = SimpleRouter()
 
 router.register("users", UserViewSet)
-router.register("opportunity", OpportunityViewSet)
+router.register("opportunity", OpportunityViewSet, basename="Opportunity")
 
 app_name = "api"
 urlpatterns = [