It has been found that any user can see the details of other users
through the IPA Web Interface (even ldapsearch with anonymous user).
It would be great if we could hide the details of the other users from
the current user (including emai, phone number, Licence Number).
Additionally, anonymous access to the information should not be available.
Rajnesh Kumar Siwal
Freeipa-users mailing list