I'm using authenticationFilter on mysql and it works fine with numerical clauses, but I've seen that this clause is not in use when filling autocomplete fields for ACL, mostly because you don't want to give permissions to anyone who can't access, and because it will offer a way to limit the users shown in this field.
Showing all users on autocomplete fields is also a security problem, because one user can see all usernames, and, in my case, their email addresses. Any help? Thanks. -- users@sogo.nu https://inverse.ca/sogo/lists
