Your Rollup is referencing data under row ownership. If the user does not have access to the data, then the rollup will reflect that on the front end of the application. What you see in the data editor is wrong.