Maybe use `islandora_datastream_access()` instead of `user_access()`?