Row level security; data returns null with join query

I have RLS on order and user table.
And I fetch the orders as a cafe owner using

const { data, error } = await supabaseClient
      .from("order")
      .select(`*, items:order_item(*), user(*)`);

const { data, error } = await supabaseClient
      .from("order")
      .select(`*, items:order_item(*), user(*)`);

The user property always return null but when I disable RLS on user table, I get the user data