I tested this as user 1 and an authenticated user with ip embargo management permissions while being outside the white zone list and i was not allowed to view the object.