Don't permit user.index_all by default
Don't permit user.index_all by default

Showing user.index_all has the unintended side effect of leaking
information about hidden instances. Furthermore the URL isn't exposed
through the UI anyway.

alkadis/vcv,phihag/adhocracy,DanielNeugebauer/adhocracy,phihag/adhocracy,alkadis/vcv,liqd/adhocracy,alkadis/vcv,phihag/adhocracy,alkadis/vcv,alkadis/vcv,phihag/adhocracy,DanielNeugebauer/adhocracy,DanielNeugebauer/adhocracy,liqd/adhocracy,DanielNeugebauer/adhocracy,liqd/adhocracy,phihag/adhocracy,DanielNeugebauer/adhocracy,liqd/adhocracy