69ea554e23
Backport #28023 by @6543 there was no check in place if a user could see a other user, if you append e.g. `.rss`