[BISERVER-10129] - Any user can view list of all users, roles and ACES v...

...ia REST