- [ ] Verify request is authenticated - [ ] Verify user permissions - [ ] Return data in users collection