mirror of
https://github.com/apache/superset.git
synced 2026-09-08 08:14:56 +00:00
The drill_info-local UserSchema declared an email field, and DatasetDrillInfoSchema nests it unfiltered for both created_by and changed_by regardless of the endpoint's select_columns contract. Any user with dataset-read access -- Gamma is sufficient -- received maintainer email addresses. Drop email from the schema so it is never serialized, matching the dashboard/RLS user schemas which expose names only.