Adds specs
Removes visibility scope
Adds changelog entry
Prevents request of all users
Extends specs
Adds scope checking
Merge remote-tracking branch 'origin/dev' into feature/return_all_users_from_api_3451
Replace class variable by a good old constant
Merge pull request #853 from opf/feature/return_all_users_from_api_3451

[FEATURE] Return all users from api 3451