Data Explorer / Discourse API issues

You can allow groups to access a query as you noticed… when this is enabled a non-admin member of a group can access a query from g/{groupname}/reports/{id}

this is expected, admins can access everything