Fix possible information disclosure within filter api

This fixes visibility of bugs within filter api for users who have
different roles in different projects.
For the purposes of this, i'm going to go with 'no'.. however, will submit a PR for us to evaluate whether to move away from using REPORTER like this.