# HG changeset patch
# User Marcin Kuzminski <marcin@rhodecode.com>
# Date 2018-05-30 13:18:34
# Node ID 5a3512185d9ab41fed465318812ae9b1f747f6ae
# Parent  4a4ea797d433c3f51c925768481d8c2710fa9f63

search-bar: forbid anonymous users to search

diff --git a/rhodecode/apps/home/views.py b/rhodecode/apps/home/views.py
--- a/rhodecode/apps/home/views.py
+++ b/rhodecode/apps/home/views.py
@@ -303,9 +303,11 @@ class HomeView(BaseAppView):
             res.append(serialized_repo)
 
         # TODO(marcink): permissions for that ?
-        users = self._get_user_list(query)
-        for serialized_user in users:
-            res.append(serialized_user)
+        allowed_user_search = self._rhodecode_user.username != User.DEFAULT_USER
+        if allowed_user_search:
+            users = self._get_user_list(query)
+            for serialized_user in users:
+                res.append(serialized_user)
 
         commits = self._get_hash_commit_list(c.auth_user, query)
         if commits: