data.all does not invalidate authentication token upon user logout

data.all authenticated users can perform restricted operations against DataSets and Environments

data.all admin user may access potentially sensitive data stored by producers via logs

data.all authenticated users can obtain incorrect object level authorizations

data.all authenticated users can perform mutating update operations on persisted notification records