Corrected getAuths
Merge remote-tracking branch 'private/new_visibility' into new_visibility
Added testcases for user operations without ACL and todo