Would be good to remove the 'id' of both User and Role schemas from what is dumped in REST API endpoints. ID of User and Role table are sensitive data that would be fine to hide from the endpoints

airflow/api_connexion/schemas/user_schema.py
#
#
from typing import List, NamedTuple
from flask_appbuilder.security.sqla.models import User
from marshmallow import Schema, fields
from marshmallow_sqlalchemy import SQLAlchemySchema, auto_field
from airflow.api_connexion.parameters import validate_istimezone
from airflow.api_connexion.schemas.role_and_permission_schema import RoleSchema
class UserCollectionItemSchema(SQLAlchemySchema):
    """user collection item schema"""
    class Meta: