Do your privacy rules allow access to the data for the specific User?