• Given a tracker with a field that nobody has permission to read
• When I GET /v1/trackers/{id}
• Then the "structure" object should not contain fields I don't have permission to read.

In the attached json file, you'll see an example of the result of a GET /v1/trackers/{id} where the problem is visible. The user I used to make the request does not have permission to read the field with id 1385. It is  not present in the "values" array, as expected but it is present in the "structure" object when it should not.