Permissions to allow end users to see other users on People/Users

[jrmhscht]

Hello,

I have the user app (4.7.2 right now) set to allow users to see the People/Users page but they are only able to see their own profile.  I gave them read access to the attributes I want them to see in edirectory, but they still only see their own profile.  How can we allow this?

Thanks,

Jeremiah

[geoffc]

To see a user you need Entry rights.  To see an attriute you need atrribute rights.

Did you give them Entry Browse/Compare rights to the users?

[jrmhscht]

Thanks Geoff.  I had not given them Entry rights.  I did that now and it still doesn't appear to work.  The user app looks at o=data and I made this change in data/users/corporate.  Do I have to add entry rights on o=data instead?  I am trying to allow these users to only see users in the corporate OU.  It works how I expect via ldap.

[jrmhscht]

Hello,

I have set the entry rights on the data ou (data.jpg) and attribute rights on data/users/corporate (corporate.jpg).  Do these look correct to allow corporate users to see other corporate users?

Thanks,

Jeremiah

[jrmhscht · Accepted solution]

I found the issue (with the help of support).  The users need to be able to read all the attributes that are in the "User Search Default Attribute" list.  I had two attributes added to that list that I had not granted them access to read.  Once that was added it works like expected.