Information Disclosure

hapi-fhir-server is vulnerable to information disclosure. When using the Consent Service and denying a resource via the Will See Resource method, the resource ID and version were still returned to the user...