Work Item Query Language Security Considerations
The result set returned by a query depends on the Team Foundation Server permissions of the user who executes the query. If the user does not have the read permissions to view all the results of the query, the system shows the user only those results the user has permissions to view. Additionally, the system does not warn the user the query results are incomplete because of insufficient permissions.