Security: Possible to list all users

Login as non-admin user and hit the url "index.php?module=Users&view=EmailsRelatedModulePopup&name=CalendarActivities&type="

Status changed to closed

Fixed in 2162a493

Milestone changed to 7.2.0