After authorizing API access with a given user (using Sierra Leone demo data) who only belongs to one Organization Unit I’m able to see ALL Data Sets (even though the data set is assigned to ONLY Bonthe and the user is ONLY assigned to Bombali).
Is this expected behaviour? Surely if the authorized user only has access to Bombali data sets the API should only show Bombali data sets and not ALL data sets in the application.
Thanks!