Hi Kris ,
How did you test ? What are you representing user security profile ? Do you mean by Row Level security ?
What is your backend database ?
Are you using publication to schedule or it is a just schedule ?
If it is a publication and If you are using UNV ,can you check in CMC whether any Profiles are created on the universe and any personalization is defined in publication .