search-bar: forbid anonymous users to search

rhodecode/apps/home/views.py

@@ -303,6 +303,8 b' class HomeView(BaseAppView):'
             res.append(serialized_repo)
 
         # TODO(marcink): permissions for that ?
+        allowed_user_search = self._rhodecode_user.username != User.DEFAULT_USER
+        if allowed_user_search:
         users = self._get_user_list(query)
         for serialized_user in users:
             res.append(serialized_user)