Relationships and permission.

I have a database that has collections of userData and lists. A user is in a one to many relationship with lists. I want to know if its possible for any user to access the lists documents without being able to access the userData document that it is related to.

I have given the lists document permissions of any:read, and the userData can only be read by the user it belongs to. Is this possible?

Just to update - I removed all permissions for the userData document and requested the list document. This returned the document fine with the ownerData attribute as null. This is what I want. However, once I add the perms back to the userData document so it can be read by the user, it returns - 'The current user is not authorized to perform the requested action.'

i think you need document security enabled and a function to apply read only permissions for the user

on that document