diff --git a/seahub/views/ajax.py b/seahub/views/ajax.py
index 902fec96ff..f249cacf3d 100644
--- a/seahub/views/ajax.py
+++ b/seahub/views/ajax.py
@@ -2287,7 +2287,7 @@ def set_user_folder_perm(request, repo_id):
     content_type = 'application/json; charset=utf-8'
 
     if not (is_pro_version() and ENABLE_FOLDER_PERM):
-        return HttpResponse(json.dumps({"error": True}),
+        return HttpResponse(json.dumps({"error": _(u"Permission denied")}),
                             status=403, content_type=content_type)
 
     user = request.POST.get('user', None)
diff --git a/static/scripts/app/views/share.js b/static/scripts/app/views/share.js
index 944f10e1a4..6bdc8a66c1 100644
--- a/static/scripts/app/views/share.js
+++ b/static/scripts/app/views/share.js
@@ -409,19 +409,34 @@ define([
             var form = this.$('#file-private-share-form');
             loading_tip.show();
 
-            var contacts = app.pageOptions.contacts || [];
             $('[name="emails"]', form).select2({
                 placeholder: gettext("Select contacts or input"),
                 width: '400px',
                 // with 'tags', the user can directly enter, not just select
                 // tags need `<input type="hidden" />`, not `<select>`
                 tags: function () {
+                    var contacts = app.pageOptions.contacts || [];
                     var contact_list = [];
                     for (var i = 0, len = contacts.length; i < len; i++) {
-                        contact_list.push(contacts[i].email);
+                        contact_list.push({ // 'id' & 'text' are required by the plugin
+                            "id": contacts[i].email,
+                            "text": contacts[i].email,
+                            "avatar": contacts[i].avatar,
+                            "name": contacts[i].name
+                        });
                     }
                     return contact_list;
                 },
+                formatResult: function(item) { // format items shown in the drop-down menu
+                    if (item.avatar) {
+                        return item.avatar + '<span class="text">' + item.name + '<br />' + item.text + '</span>';
+                    } else {
+                        return; // if no match, show nothing
+                    }
+                },
+                formatSelection: function(item) { // format selected item shown in the input
+                    return item.name || item.text; // if no name, show the email, i.e., when directly input, show the email
+                },
                 tokenSeparators: [',', ' '],
                 escapeMarkup: function(m) { return m; }
             });
@@ -479,12 +494,28 @@ define([
                 placeholder: gettext("Select contacts or input"),
                 width: '400px',
                 tags: function () {
+                    var contacts = app.pageOptions.contacts || [];
                     var contact_list = [];
                     for (var i = 0, len = contacts.length; i < len; i++) {
-                        contact_list.push(contacts[i].email);
+                        contact_list.push({ // 'id' & 'text' are required by the plugin
+                            "id": contacts[i].email,
+                            "text": contacts[i].email,
+                            "avatar": contacts[i].avatar,
+                            "name": contacts[i].name
+                        });
                     }
                     return contact_list;
                 },
+                formatResult: function(item) { // format items shown in the drop-down menu
+                    if (item.avatar) {
+                        return item.avatar + '<span class="text">' + item.name + '<br />' + item.text + '</span>';
+                    } else {
+                        return; // if no match, show nothing
+                    }
+                },
+                formatSelection: function(item) { // format selected item shown in the input
+                    return item.name || item.text; // if no name, show the email, i.e., when directly input, show the email
+                },
                 tokenSeparators: [',', ' '],
                 escapeMarkup: function(m) { return m; }
             });