The issue is that this is even a possibility. It should not be possible to access user data, even if a manager approves it.