mla: deny access to specific ID for users in user level API

User who don't have manipulate_permission action group
should not see users in system, even he shouldn't access
them directly by their ID's.

Change-Id: I90ec94fd0194680548e159f5d9bc010f5c233b91
Bug-Url: https://bugzilla.redhat.com/1160443
Signed-off-by: Ondra Machacek <machacek.ondra@gmail.com>