pub async fn list_users(
__arg0: State<AppState>,
user: CurrentUser,
) -> Result<impl IntoResponse, ApiError>Expand description
Lists everyone. The one route a manager may call. Lists the people the caller may see.
An administrator sees everyone. A manager sees the departments they run, plus themselves - a manager who could not find their own row would think the page was broken. Someone with no department is visible to the admin alone: an unfiled person is noticed at once because they are missing from every manager’s list, whereas showing them to every manager would be a leak nobody sees happening (ADR 0009).