Asynchronous data download does not get restricted activities even if project logged in user is a project admin. The issue is the thread running the download does not know who requested the download. The solution is to set userId and clear it when thread complete.