Removing Read Permissions to any field of the directus_users collection removes access to view all users
Describe the Bug
Background:
I started with a new instance of directus with nothing in it. I applied the CMS template using the CLI. I started with App Access Minimum and started adding more access as needed.
Goal:
I don't want my users to see all the information about a user in the directus_users table so I unchecked all the fields that are allowed. When logging in as user with those minimal permissions they can no longer see other users from the users module only their own user.
I noticed that this happens even if I remove just one field. I recorded a video to show this behavior.
To bring things back to normal I have add "Read All" permissions to the directus_users collection
To Reproduce
I recorded a video to show the steps.
https://app.screencast.com/ZbANUWMsZD7ni
Directus Version
v11.7.2
Hosting Strategy
Self-Hosted (Docker Image)
Database
Supabase Cloud
Source: directus/directus