Avoid checking viewer id if not relevant

[juliushaertl]

As found during debugging with @max-nextcloud the viewerId only needs to be checked if we are validating a user lock.