Restricted user can not see all accessible other users in the Directory (no permission view-outside-room)

[ggruber4711]

Description:

Steps to reproduce:

1. Remove the permission view-outside-room from the role User
2. Create a new group TestGroup 1
3. Create User A and add the user to the group just created
4. Create User B and add the user to the group just created
5. Login with User A and click on the search button to search for other users

Expected behavior:

Search result should contain User B, as he is in the same group as User A.

Actual behavior:

Only those users can be found, where at least once a discussion was started.

Server Setup Information:

• Version of Rocket.Chat Server: 1.1.3
• Operating System: Linux
• Deployment Method: Docker
• Number of Running Instances: 1
• DB Replicaset Oplog:
• NodeJS Version: 8.11.4
• MongoDB Version: 4.0.10

[ggruber4711]

Can someone give a hint on how this could be fixed?

[reetp]

Please see our guide for opening issues: https://rocket.chat/docs/contributing/reporting-issues

Rocket moves rapidly and this may already be fixed.

Test on either 1.3.x or Develop.

Can someone give a hint on how this could be fixed?

If it isn't already the devs will look in due course.

This is Open Source. Everyone can contribute.

[rodrigomeneguet]

Do you have any plans to implement this improvement?

[ggruber4711]

Please see our guide for opening issues: https://rocket.chat/docs/contributing/reporting-issues

Rocket moves rapidly and this may already be fixed.

Test on either 1.3.x or Develop.

Can someone give a hint on how this could be fixed?

If it isn't already the devs will look in due course.

This is Open Source. Everyone can contribute.

Just checked on 2.1.0 and the problem still exists.
If any expert could give some advice on where the necessary code-ajustments would needed to be done, I might be able to help to implement this feature.

[reetp]

Please note this is not a help forum.

See https://rocket.chat/docs/getting-support/

https://open.rocket.chat

#dev channel for developers needing help developing new features

[github-actions]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[ggruber4711]

hmm, there is a PR which fixes the problem. I think only think left is to merge the Pull Request :-)

[dimitrihof]

Would be nice to have that fixed.

[ecfghjp]

Any action on it yet , this is a very desirable feature for our use case as well, specially when you want to restrict users haiving access to their channels/groups and restricting them from peeking into all users on the server

[wokawoka]

I agree, it would be great if the way it works now could be changed

[skmaingi]

This issue was resolved. Remove view-outside-room permission from the role User and create team with user A and B.