add user read permission to clients

src/user/user.service.ts

@@ -125,7 +125,7 @@ export async function listUsers(user: AuthenticatedUser) {
     return await userModel
       .find({
         $and: [
-          { tenantId: user.tenantId, orgId: user.orgId },
+          { tenantId: user.tenantId, orgId: user.orgId, role: "client" },
           { dev: { $ne: true } },
         ],
       })

src/utils/roles.ts

@@ -116,6 +116,7 @@ export const rules: Record<
   },
   client: {
     claims: [
+      "user:read",
       "permit:read",
       "permit:write",
       "file:upload",