Can this work?
I guess you need to grant some permissions to the_user? But what?
(I really don’t care about “security” when all it does is stop things from working.)