Security issue - user without assigment can see all user data in the organization.

[m-szalik]

I have a user that belongs to the organization (added to Keycloak) without any OpenFGA assignment.
The user cannot see members - that's IMHO is correct, despite the message is wrong.

But the user can click ADD and see all available users.