I made a small client that pulls out merge requests and nags the assigned users on a weekly basis if they haven't merged or closed them. Doing this I noticed that it's not possible to receive an individual user's information from the API - just get the full list of all users (double-checked this from CBHQ tech support).
This is otherwise fine, but the client does then require the "Manage all users" -permission, which is kind of a nasty permission for a read-only bot to have.
I'd like to see basically "GET /users/:id" functioning; alternatively, interpret the permissions so that "GET /users" is allowed when user has the "access individual users" permission.
Collecting We're collecting votes & feedback about this suggestion!