/users/ returns full user list

[dorey]

When querying /users/

Would be nice to use this provide a dropdown and/or autocomplete of available users to grant new sharing permissions with.

when users are ___ it should return ___

• not logged in ... empty list
• logged in ... no random users (so i can't use it to see who everyone who's created an account). but show all users who the user would want to share an asset with. How do we decide this? Maybe based on existing links with other users through permissions.

[tinok]

I'd suggest the following:

By default a user needs to enter the exact username of the person they want to share with. In addition:

when users are ___ it should return ___

• logged in but have never shared anything ... empty list
• logged in but has shared previously ... show list of recent (or all previous) usernames they've shared with