Comment 1 for bug 1161115

After some investigation, it is clear the "Access Denied" is caused by trying to access the partner_id field of User. This fails as UserB's partner_id is linked to company "Your Company", while the user only has access to view "CompanyB".

To avoid this problem I have proposed a fix (see related branch above) which only retrieves the fields immeditely required to get logo_web and will now display the logo without error.