Block Access to Contacts : Employee, Person, Company

There is no option to block Access to Contacts (Employee, Person, Company) to any user.
It will not be safe to give access of contacts to all users. Instead the admin should have the power to allow the access to limited users.

The issue covers access to Employee, Person, and Company contacts. Start by locating the existing permission or access-control entry points for these entities and review how administrators grant access. Done means an administrator can restrict contact access to selected users rather than exposing it to everyone; no file or test is named in the issue.

Written by the indexing model from the issue text.