Zone Nan
says to
Happy Web Developer
應該是 連用戶資料根本不用權限就被瀏覽