Paul, thanks so much for the reply!
I replaced my code with what you suggested and it is no longer throwing any errors (for the .contains() suggestion, I looked at the Velo API reference and think you were referring to .hasSome, which I replaced .eq with) - however, I am now having the issue where the the backend code in the editor is returning the correct result but when I access the published site, it is not throwing an error but is also returning an incorrect (empty - see console logs below) result.
I have put a screenshot of both results below (have replaced ‘UserA’ above with ‘chef’ and ‘UserB’ with ‘user’ to make it easier to differentiate) - do you think this could be because of an issue with permissions? I thought that suppressAuth: true would solve that issue.
Thank you!
Backend Returns:
Published Code Returns:

The site logs are also recording an issue with the published site as the following:

