As it is a permissions issue, yes, it certainly *could* be because the user is not a member of the 'audio' group, assuming that is the group that /dev/dsp is a member of.
Try adding the user to the 'audio' group and see what happens. It won't hurt
Sasha