Steps to reproduce
- On main wiki, create users XWiki.Alice and XWiki.Bob.
- Restrict view access to page XWiki.Bob to XWiki.XWikiAdminGroup.
- Create subwiki where only global users are available.
- Log in as Alice, go to home page of the newly created subwiki and hit "Share page".
- Type "b" in the "Send to" field of the share page dialog.
User page "XWiki.Bob" gets suggested while it should not since it's not viewable by Alice.
- is related to
XWIKI-18850 Unauthenticated user can retrieve the list of users through uorgsuggest.vm