Fix wrong permission in UserPolicy#find (#1536)

framework/core/src/User/UserPolicy.php

@@ -38,7 +38,7 @@ class UserPolicy extends AbstractPolicy
      */
     public function find(User $actor, Builder $query)
     {
-        if ($actor->cannot('viewDiscussions')) {
+        if ($actor->cannot('viewUserList')) {
             $query->whereRaw('FALSE');
         }
     }