access level not properly recognised if user has only db access instead of product access

[Fidel Thomet]