Fix privilege check to include secondary user stores

Fix privilege check to include secondary user stores #4099