does your friend still know the password of the user's documents they are trying to access. If so, they could create a user with the same username and same password and gain access to the files. It was a method I had used when I transferred my documents on a portable hard drive.
/ 
