Answer
Check the system parameter controlling default permission-set grants for Lobby presentation objects before assuming the datasource itself is broken — if it works correctly under a full-access account (like the application owner) but not otherwise, that parameter is the more likely cause than the datasource definition.