Ensure current user before enforcing policy

Ensure there is a current user on user show before enforcing policy that
applies to current user.