Use the uid from the vote. The could be another user publishing in the name of another user. $user will not fit here.