Backport #28023 by @6543 there was no check in place if a user could see a other user, if you append e.g. `.rss`
X-Gitea-Debug
IssueList
[]*Issue
db.DefaultContext