Access: The user may retrieve their own user settings. For viewing someone else's settings, the user has to be an administrator.