Display Locked out users in list, ACL issue?

[sammarcow]

I need members on a certain form to be able to see Locked Out users and Inactive Users, reasoning that they are HR Administrators and need to select employees who no longer have access or who have been let go.   If I run a query as my role admin I get a user that is locked out, however if I run the same query as one of the HR Administrators, there are 0 messages about missing data from security constraints and the query returns 0 results.    

Why?

[dvp · Accepted solution]

Is it on sys_user table if there

there is a business rule called user query which filter's out the inactive users.

When the user is locked out, active will be set to FALSE

If you want HR admins to see all the users then you need to add hr admin role to be condition

!gs.hasRole('HR_ADMIN_ROLE')