fix: @querystring shouldn't list userids

[askadityapandey]

This Pull Request fixes #1777 , lemme know if I need to make changes!

---

📚 Documentation preview 📚: https://plonerestapi--1824.org.readthedocs.build/

[mister-roboto]

@askadityapandey thanks for creating this Pull Request and helping to improve Plone!

TL;DR: Finish pushing changes, pass all other checks, then paste a comment:

@jenkins-plone-org please run jobs

To ensure that these changes do not break other parts of Plone, the Plone test suite matrix needs to pass, but it takes 30-60 min. Other CI checks are usually much faster and the Plone Jenkins resources are limited, so when done pushing changes and all other checks pass either start all Jenkins PR jobs yourself, or simply add the comment above in this PR to start all the jobs automatically.

Happy hacking!

[davisagli]

Thanks for working on this. I'd like a few things to be different in the implementation:

1. We should not have 2 different endpoints. We should still have one endpoint, @querystring, but it should fiilter its output based on the current user's permissions.
2. Instead of a hardcoded list of sensitive vocabs, we should check for the user's permission to use the vocab in the same way that the @vocabularies endpoint already does:

   plone.restapi/src/plone/restapi/services/vocabularies/get.py

   Line 31 in f68fab7

   def _has_permission_to_access_vocabulary(self, vocabulary_name):

3. There should be at least one test for this filtering, and the existing tests need to pass (or be updated to match a change in behavior, if necessary).
4. There should be a note about the permission-based filtering in the docs for this endpoint.

[davisagli]

@askadityapandey I would like to merge this, but I am waiting for you to remove the changes in configure.zcml. They are wrong and are the reason the tests are not passing.

[davisagli]

@askadityapandey Please look at the automated checks that failed:

• "Black" -> this means you should autoformat the code by running make black
• "Tests" -> the tests are failing with a 500 error
• "Changelog verifier" -> you need to add an entry for the release notes, see https://6.docs.plone.org/contributing/index.html#contributing-change-log-label