Issue with user.list() Access: Normal Users Unable to View Ranking Data (Gamification)

Hello everyone,
I’m running into a persistent issue when trying to implement ranking and gamification features in my Basee44 web applications.

The problem is related to user.list().
Only the owner account (with the owner role) is able to retrieve user information such as name, profile, avatar, and XP points. These fields are required to build dynamic leaderboards.
Sometimes this inability crashes the whole app, when a regular user is trying to render comments or profiles.

However:

• Regular users cannot access user.list(), and as a result they cannot see themselves or others in the ranking.

• Even when Basee44 suggests creating a separate data type to mirror user information, the same permission restrictions still block access.

• Not even admins can see the ranking — only the owner account can.

This makes it impossible to use any gamification features that rely on displaying other users’ data.

Questions:

1. Is this a known limitation of user.list()?

2. Is there a recommended way to allow regular users to read non-sensitive public user data (e.g., name, avatar, XP)?

3. Should I be using a different approach or permission model to expose leaderboard data to all authenticated users?

Any guidance or best practices would be greatly appreciated. Thank you!