Glad to know that.Yes, this is permissions issue.
yes, both points are correct but I would recommend solution 2 based on Adobe's guidelines. Now, it can be a OOTB group or a custom group with appropriate permissions and user1 can be a part of this group.