Steps to reproduce:
1. Login to any OC server, e.g. https://octestallinone.virtuos.uos.de/
2. Query an endpoint that involves roles, like https://octestallinone.virtuos.uos.de/roles/roles.xml
You get a long list of properties under the organization element, including a lot of player properties.
Only the relevant info should be returned. Organization ID is surely sufficient here.
Workaround (if any):