Display data basing on the group permission
user_access is for core permissions, I.e. those added through hook_permission. For organic groups’ own permissions hook, you need to use the complementary og_user_access:, eg:

if (og_user_access($group_type, $gid, 'rulesprm')) {
  ...
}