Are you saying that only one user gets this "unauthorized" error, while it works for other users? That strongly suggests that this is the web client reporting that the user does not have read rights to the document. You can check that user's effective rights on the entry to confirm one way or another. There may also be more detailed information in the event viewer.