Do not allow non-admin users to access and view other users within the Portal.
If a user does not have the permission allowed for Account Access - they should not be able to view User and Team information!
For portals where we are supporting internal and external users, emails and access levels are displayed.
I see this being a significant security issue - for:
1. Sharing emails and contact details with users who should not have access to this information
2. Providing details for admin users that if a users account was compromised could be used to try and get other access