Protect user api and create a filtered user api for relationships.

[mshima]

Overview of the feature request

I propose to:

• Move current '/api/users' to '/api/admin/users' and protect it with admin role.
• Create a compatible '/api/users' with filtered data (id, first and last name).
  And enable by default only if there is some relationship with User.

Motivation for or Use Case

Create a safer default to prevent privacy issues.

Related issues or PR

• Checking this box is mandatory (this is just to show you read everything)

[pascalgrimaud]

Big +1

About

Create a compatible '/api/users' with filtered data (id, first and last name).
And enable by default only if there is some relationship with User

do you have an idea how to do this part ?

[pascalgrimaud]

unless you want to take this ticket @mshima, I'd like to keep this for our JHipster Code in 1 week.
It's not difficult to achieve it.
Are you ok ?

[mshima]

@pascalgrimaud I will not take this ticket.
Most of the job I am doing is related to the workflow.
My own todo is almost finished, then I will create some tickets with cleanup suggestions.
I would suggest to add a bounty to it, but you can keep it to JHipster Code.

[github-actions]

This issue is stale because it has been open 30 days with no activity.
Our core developers tend to be more verbose on denying. If there is no negative comment, possibly this feature will be accepted.
We are accepting PRs 😃.
Comment or this will be closed in 7 days

[pascalgrimaud]

important to have

[github-actions]

This issue is stale because it has been open 30 days with no activity.
Our core developers tend to be more verbose on denying. If there is no negative comment, possibly this feature will be accepted.
We are accepting PRs 😃.
Comment or this will be closed in 7 days

[pascalgrimaud]

adding a bounty, if it can motivated someone

[github-actions]

This issue is stale because it has been open 30 days with no activity.
Our core developers tend to be more verbose on denying. If there is no negative comment, possibly this feature will be accepted.
We are accepting PRs 😃.
Comment or this will be closed in 7 days

[pascalgrimaud]

PR in progress: #13048

[pascalgrimaud]

I'm increasing the bounty as it was much work than expected
Don't forget it @gzsombor

[gzsombor]

Thanks @pascalgrimaud ! I claimed the bug bounty here: https://opencollective.com/generator-jhipster/expenses/30439

[pascalgrimaud]

@gzsombor : approved