Hacker News Reader

It's at least a user enumeration issue

Why? what's the actual issue? If you have access to it, wouldn't you know the id anyways?

It leaks information about the company - for example, you can see precisely how many documents have been created over x days