If a user with view rights (no admin) creates a scheduled email report and selects the "All Websites dashboard" in his statistics, he is able so see all websites configured in Piwik in the pdf report. Not only his own websites.
This issue is only in the reports the user gets automatically via email. If he opens the reports directly on the Piwik website, the pdf file only includes his own websites.
Keywords: dashbord, pdf, reports, email
already fixed you can try latest RC from builds.piwik.org