Why does autofill for watchers need the Global Permission "Browse User"?

[MK]

Hello,

we want to let customer use the watcher function but don't want them, for security reasons, to browse all users.
is there a way for that?

also, i don't get why the watchers field isn't similar to the autofill on the "Assignee"-field, i'm missing some point here?

Regards,

Micha

[Nic Brough -Adaptavist-]

The assignee field is limited by permissions.  The watchers field could be anyone - that's the point of it - it could be anyone in the system.  If you removed the requirement to "browse all users", then the watchers field would let you browse all the users by definition...