MDL-37473 completion: Add missing cap checks to tracked users functions