Put a method in to return a list of managers and placed a DTO object in for the user.  Some user information should not leave the server.