Perhaps you want to control the logging to see the REST request get handled and then see the database interaction. You may want to see how SQL changes between users (e.g. Mayes/Admin/Ebden) and how that may effect the XML payload returned.
To see that…