Have you looked at the ASDM log while he is trying to do his tasks? Try that and see if it reports any denies or translation problems. That might give you a hint where to go next. If you still have issues please post a sanitized (passwords and public IPs masked out) complete ASA configuration.
Good Luck