Thanks!
As far as I can tell this would be a way to restrict the search to usernames only. But this doesn't really solve the issue, especially if usernames are modeled after real names.
In addition, you can always use the "role name" search with some plausible terms ("user", "admin", "member") and basically get lists of all users including full names.
I had thought that at least local users from other categories might be hidden, but no: the search field even returns local users from categories which the current account doesn't have access to.
As far as I can tell this would be a way to restrict the search to usernames only. But this doesn't really solve the issue, especially if usernames are modeled after real names.
In addition, you can always use the "role name" search with some plausible terms ("user", "admin", "member") and basically get lists of all users including full names.
I had thought that at least local users from other categories might be hidden, but no: the search field even returns local users from categories which the current account doesn't have access to.