Discussion on: Strapi quirks you should know about

[Alan]

@paratron would it not be easier to just override users find endpoint and return nothing there - as that "find" permission seems to be the only one that is required for filtering/connecting by and to users?

[Alan]

I just tried that and it really was easy for a Strapi beginner like me. So here's what I did (for anyone else ending up here):

Navigated to strapi/src/extensions/users-permissions/ and created a file named strapi-server.js with following in it:

module.exports = (plugin) => {
  plugin.controllers.user.find = (ctx) => {
    return {};
  };
  return plugin;
};

And that's it.