How to forbid get and find on the userEndpoint?

[wuyuanyi135]

Hello
I don't want get and find service exposed to the user because it will list usernames. I tried to use hook but after disabling find the authentication process failed: because it need the user service to populate username. Is there any suggestion to block these services?

[daffl]

You can use the disable hook and disable external access for those methods.

[wuyuanyi135]

Thank you. Will look at it