If you have it in a query based portlet the quick and dirty way is to set up the URL as Concat of the static part of the URL and the user ID from your query.
Does not look that fancy, but works.
Does the user who would click the link have the rights to see what it would display?