Restricted permission administrators not seeing all users

Permalink Browser Info Environment
When creating advanced permission groups that allow the management of users, a "non-default administrator" (someone part of a created administrator group) cannot see any users who are not assigned to any group other than the default set. Anyone assigned to other groups are visible to the user.

Adding the following below line 76 of src/User/Search/SearchProvider.php fixes this in our case, but admittedly this may open things up for others:

[code]$gs->includeAllGroups();[code]


Status: New

concrete5 Environment Information

# concrete5 Version
Core Version - 8.4.3
Version Installed - 8.4.3
Database Version - 20180716000000

# concrete5 Packages
Block Designer (3.1.3), Block Designer Pro (3.0.0), Deluxe Customizable Twitter Feed (1.0.3), ExchangeCore reCAPTCHA (1.1.1), Login Block (0.9.3), MailChimp Subscribe (3.1.1)

# concrete5 Overrides
blocks/autonav/templates/breadcrumb.php, blocks/autonav/templates/footer.php, blocks/autonav/templates/header.php, blocks/autonav/templates/leadership.php, blocks/autonav/templates, blocks/autonav, blocks/blog_user_info/add.php, blocks/blog_user_info/composer.php, blocks/blog_user_info/config.json, blocks/blog_user_info/controller.php, blocks/blog_user_info/db.xml, blocks/blog_user_info/edit.php, blocks/blog_user_info/form.php, blocks/blog_user_info/icon.png, blocks/blog_user_info/view.php, blocks/blog_user_info, blocks/calendar/view.php, blocks/calendar, blocks/calendar_list/add.php, blocks/calendar_list/composer.php, blocks/calendar_list/config.json, blocks/calendar_list/controller.php, blocks/calendar_list/db.xml, blocks/calendar_list/edit.php, blocks/calendar_list/form.php, blocks/calendar_list/icon.png, blocks/calendar_list/view.php, blocks/calendar_list, blocks/campaign_list/css_form/repeatable-ft.form.css, blocks/campaign_list/css_form, blocks/campaign_list/js_form/handlebars-helpers.js, blocks/campaign_list/js_form/handlebars-v4.0.4.js, blocks/campaign_list/js_form, blocks/campaign_list/add.php, blocks/campaign_list/auto.js, blocks/campaign_list/composer.php, blocks/campaign_list/config.json, blocks/campaign_list/controller.php, blocks/campaign_list/db.xml, blocks/campaign_list/edit.php, blocks/campaign_list/form.php, blocks/campaign_list/icon.png, blocks/campaign_list/view.php, blocks/campaign_list, blocks/contact_accordion/css_form/repeatable-ft.form.css, blocks/contact_accordion/css_form, blocks/contact_accordion/js_form/handlebars-helpers.js, blocks/contact_accordion/js_form/handlebars-v4.0.4.js, blocks/contact_accordion/js_form, blocks/contact_accordion/add.php, blocks/contact_accordion/auto.js, blocks/contact_accordion/composer.php, blocks/contact_accordion/config.json, blocks/contact_accordion/controller.php, blocks/contact_accordion/db.xml, blocks/contact_accordion/edit.php, blocks/contact_accordion/form.php, blocks/contact_accordion/icon.png, blocks/contact_accordion/view.php, blocks/contact_accordion, blocks/contact_footer/add.php, blocks/contact_footer/controller.php, blocks/contact_footer/db.xml, blocks/contact_footer/edit.php, blocks/contact_footer/form.php, blocks/contact_footer/view.php, blocks/contact_footer, blocks/contact_tiles/css_form/repeatable-ft.form.css, blocks/contact_tiles/css_form, blocks/contact_tiles/js_form/handlebars-helpers.js, blocks/contact_tiles/js_form/handlebars-v4.0.4.js, blocks/contact_tiles/js_form, blocks/contact_tiles/add.php, blocks/contact_tiles/auto.js, blocks/contact_tiles/composer.php, blocks/contact_tiles/config.json, blocks/contact_tiles/controller.php, blocks/contact_tiles/db.xml, blocks/contact_tiles/edit.php, blocks/contact_tiles/form.php, blocks/contact_tiles/icon.png, blocks/contact_tiles/view.php, blocks/contact_tiles, blocks/content/templates/grey.php, blocks/content/templates/white.php, blocks/content/templates, blocks/content, blocks/customizable_twitter_feed/view.php, blocks/customizable_twitter_feed, blocks/d3_mailchimp/view.php, blocks/d3_mailchimp, blocks/document_list/add.php, blocks/document_list/composer.php, blocks/document_list/config.json, blocks/document_list/controller.php, blocks/document_list/db.xml, blocks/document_list/edit.php, blocks/document_list/form.php, blocks/document_list/icon.png, blocks/document_list/view.php, blocks/document_list, blocks/find_us/add.php, blocks/find_us/controller.php, blocks/find_us/db.xml, blocks/find_us/edit.php, blocks/find_us/form.php, blocks/find_us/view.php, blocks/find_us, blocks/form/view.php, blocks/form, blocks/header_image/add.php, blocks/header_image/controller.php, blocks/header_image/db.xml, blocks/header_image/edit.php, blocks/header_image/form.php, blocks/header_image/view.php, blocks/header_image, blocks/home_header/add.php, blocks/home_header/controller.php, blocks/home_header/db.xml, blocks/home_header/edit.php, blocks/home_header/form.php, blocks/home_header/view.php, blocks/home_header, blocks/localities/add.php, blocks/localities/composer.php, blocks/localities/config.json, blocks/localities/controller.php, blocks/localities/db.xml, blocks/localities/edit.php, blocks/localities/form.php, blocks/localities/icon.png, blocks/localities/view.php, blocks/localities, blocks/locality/css_form/repeatable-ft.form.css, blocks/locality/css_form, blocks/locality/js_form/handlebars-helpers.js, blocks/locality/js_form/handlebars-v4.0.4.js, blocks/locality/js_form, blocks/locality/add.php, blocks/locality/auto.js, blocks/locality/composer.php, blocks/locality/config.json, blocks/locality/controller.php, blocks/locality/db.xml, blocks/locality/edit.php, blocks/locality/form.php, blocks/locality/icon.png, blocks/locality/view.php, blocks/locality, blocks/page_list/templates/home_blog.php, blocks/page_list/templates/home_events.php, blocks/page_list/templates/home_news.php, blocks/page_list/templates/leadership.php, blocks/page_list/templates/news_aside.php, blocks/page_list/templates/news_footer.php, blocks/page_list/templates/news_overall.php, blocks/page_list/templates, blocks/page_list/view.php, blocks/page_list, blocks/read_more_on_choices/add.php, blocks/read_more_on_choices/controller.php, blocks/read_more_on_choices/db.xml, blocks/read_more_on_choices/edit.php, blocks/read_more_on_choices/form.php, blocks/read_more_on_choices/view.php, blocks/read_more_on_choices, blocks/search/view.php, blocks/search, controllers/page_types/structure_node.php, controllers/page_types, controllers/single_page/dashboard/documents/home.php, controllers/single_page/dashboard/documents, controllers/single_page/dashboard/clearcache.php, controllers/single_page/dashboard/documents.php, controllers/single_page/dashboard/qasadmin.php, controllers/single_page/dashboard, controllers/single_page/find_a_service/results.php, controllers/single_page/find_a_service, controllers/single_page/intranet/qas.php, controllers/single_page/intranet/staff_suggestions.php, controllers/single_page/intranet, controllers/single_page/download_file.php, controllers/single_page/events_calendar.php, controllers/single_page/file_search.php, controllers/single_page, elements/header_required.php, jobs/import_users.php, jobs/password_reset.php, jobs/permissions_update.php, jobs/update_node_paths.php, jobs/import_documents.php, css/main.css, js/main.js, mail/initial_password_reset.php, mail/qas_investigation_to_provider.php, mail/qas_investigation_to_user.php, mail/qas_no_investigation_to_user.php, single_pages/dashboard/documents/home.php, single_pages/dashboard/documents, single_pages/dashboard/clearcache.php, single_pages/dashboard/documents.php, single_pages/dashboard/qasadmin.php, single_pages/dashboard, single_pages/find_a_service/results.php, single_pages/find_a_service, single_pages/intranet/qas.php, single_pages/intranet/staff_suggestions.php, single_pages/intranet, single_pages/events_calendar.php, single_pages/file_search.php, single_pages/find_a_service.php, themes/hertsvalleysccg/elements/footer.php, themes/hertsvalleysccg/elements/header.php, themes/hertsvalleysccg/elements, themes/hertsvalleysccg/blog_post.php, themes/hertsvalleysccg/board_member.php, themes/hertsvalleysccg/default.php, themes/hertsvalleysccg/description.txt, themes/hertsvalleysccg/home.php, themes/hertsvalleysccg/news_article.php, themes/hertsvalleysccg/page_theme.php, themes/hertsvalleysccg/section.php, themes/hertsvalleysccg/view.php, themes/hertsvalleysccg, src/Entity/Qas.php, src/Entity, src/Entity.php

# concrete5 Cache Settings
Block Cache - On
Overrides Cache - On
Full Page Caching - On - If blocks on the particular page allow it.
Full Page Cache Lifetime - Every 6 hours (default setting).

# Server Software
nginx/1.14.2

# Server API
fpm-fcgi

# PHP Version
7.2.9

# PHP Extensions
apcu, bz2, calendar, cgi-fcgi, Core, ctype, curl, date, dom, exif, fileinfo, filter, ftp, gd, gettext, hash, iconv, imap, json, ldap, libxml, mbstring, mysqli, mysqlnd, openssl, pcre, PDO, pdo_mysql, pdo_sqlite, Phar, posix, Reflection, session, shmop, SimpleXML, sockets, SPL, sqlite3, standard, sysvmsg, sysvsem, sysvshm, tokenizer, wddx, xml, xmlreader, xmlrpc, xmlwriter, xsl, Zend OPcache, zlib

# PHP Settings
max_execution_time - 60
log_errors_max_len - 1024
max_file_uploads - 20
max_input_nesting_level - 64
max_input_time - 60
max_input_vars - 1000
memory_limit - 656M
post_max_size - 32M
upload_max_filesize - 64M
ldap.max_links - Unlimited
mysqli.max_links - Unlimited
mysqli.max_persistent - Unlimited
pcre.backtrack_limit - 1000000
pcre.recursion_limit - 100000
session.cache_limiter - <i>no value</i>
session.gc_maxlifetime - 7200
opcache.max_accelerated_files - 4096
opcache.max_file_size - 0
opcache.max_wasted_percentage - 5

Browser User-Agent String

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36