scope users by their visibility so that admin rights are not required
changelog

Conflicts:
	doc/CHANGELOG.md
Merge pull request #593 from opf/fix/scope_user_visibility

Fix/scope user visibility