MDL-41179 is_user_access_restricted_by_capability() must look at specified user and not current