diff --git a/.bumpversion.cfg b/.bumpversion.cfg
index d19fc0628..2f5891bd8 100644
--- a/.bumpversion.cfg
+++ b/.bumpversion.cfg
@@ -1,5 +1,5 @@
 [bumpversion]
-current_version = 4.1.8
+current_version = 4.1.9
 commit = False
 tag = False
 
diff --git a/dev/local/setup.cfg b/dev/local/setup.cfg
index 4ccf7a7de..8498f8dd3 100644
--- a/dev/local/setup.cfg
+++ b/dev/local/setup.cfg
@@ -1,6 +1,6 @@
 [metadata]
 name = Delphi Development
-version = 4.1.8
+version = 4.1.9
 
 [options]
 packages =
diff --git a/src/client/delphi_epidata.R b/src/client/delphi_epidata.R
index b6a749c4c..dfed86935 100644
--- a/src/client/delphi_epidata.R
+++ b/src/client/delphi_epidata.R
@@ -15,7 +15,7 @@ Epidata <- (function() {
   # API base url
   BASE_URL <- getOption('epidata.url', default = 'https://api.delphi.cmu.edu/epidata/')
 
-  client_version <- '4.1.8'
+  client_version <- '4.1.9'
 
   auth <- getOption("epidata.auth", default = NA)
 
diff --git a/src/client/delphi_epidata.js b/src/client/delphi_epidata.js
index 2e297fbc7..65a455370 100644
--- a/src/client/delphi_epidata.js
+++ b/src/client/delphi_epidata.js
@@ -22,7 +22,7 @@
   }
 })(this, function (exports, fetchImpl, jQuery) {
   const BASE_URL = "https://api.delphi.cmu.edu/epidata/";
-  const client_version = "4.1.8";
+  const client_version = "4.1.9";
 
   // Helper function to cast values and/or ranges to strings
   function _listitem(value) {
diff --git a/src/client/packaging/npm/package.json b/src/client/packaging/npm/package.json
index d472d4679..2137be90e 100644
--- a/src/client/packaging/npm/package.json
+++ b/src/client/packaging/npm/package.json
@@ -2,7 +2,7 @@
   "name": "delphi_epidata",
   "description": "Delphi Epidata API Client",
   "authors": "Delphi Group",
-  "version": "4.1.8",
+  "version": "4.1.9",
   "license": "MIT",
   "homepage": "https://github.com/cmu-delphi/delphi-epidata",
   "bugs": {
diff --git a/src/client/packaging/pypi/delphi_epidata/__init__.py b/src/client/packaging/pypi/delphi_epidata/__init__.py
index 2118464c1..6edb71a3f 100644
--- a/src/client/packaging/pypi/delphi_epidata/__init__.py
+++ b/src/client/packaging/pypi/delphi_epidata/__init__.py
@@ -1,4 +1,4 @@
 from .delphi_epidata import Epidata
 
 name = "delphi_epidata"
-__version__ = "4.1.8"
+__version__ = "4.1.9"
diff --git a/src/client/packaging/pypi/setup.py b/src/client/packaging/pypi/setup.py
index 08849cfcd..601ef3dc1 100644
--- a/src/client/packaging/pypi/setup.py
+++ b/src/client/packaging/pypi/setup.py
@@ -5,7 +5,7 @@
 
 setuptools.setup(
     name="delphi_epidata",
-    version="4.1.8",
+    version="4.1.9",
     author="David Farrow",
     author_email="dfarrow0@gmail.com",
     description="A programmatic interface to Delphi's Epidata API.",
diff --git a/src/server/_config.py b/src/server/_config.py
index 6acbc7751..4a96250c6 100644
--- a/src/server/_config.py
+++ b/src/server/_config.py
@@ -7,7 +7,7 @@
 
 load_dotenv()
 
-VERSION = "4.1.8"
+VERSION = "4.1.9"
 
 MAX_RESULTS = int(10e6)
 MAX_COMPATIBILITY_RESULTS = int(3650)
diff --git a/src/server/endpoints/covidcast.py b/src/server/endpoints/covidcast.py
index bd336dacf..11de3cbca 100644
--- a/src/server/endpoints/covidcast.py
+++ b/src/server/endpoints/covidcast.py
@@ -235,6 +235,7 @@ def gen(rows):
 def handle_export():
     source, signal = request.values.get("signal", "jhu-csse:confirmed_incidence_num").split(":")
     source_signal_sets = [SourceSignalSet(source, [signal])]
+    source_signal_sets = restrict_by_roles(source_signal_sets)
     daily_signals, weekly_signals = count_signal_time_types(source_signal_sets)
     source_signal_sets, alias_mapper = create_source_signal_alias_mapper(source_signal_sets)
     start_time_set = parse_day_or_week_arg("start_day", 202001 if weekly_signals > 0 else 20200401)
@@ -317,9 +318,10 @@ def handle_backfill():
     example query: http://localhost:5000/covidcast/backfill?signal=fb-survey:smoothed_cli&time=day:20200101-20220101&geo=state:ny&anchor_lag=60
     """
     require_all(request, "geo", "time", "signal")
-    source_signal_set = parse_single_source_signal_arg("signal")
-    daily_signals, weekly_signals = count_signal_time_types([source_signal_set])
-    source_signal_sets, _ = create_source_signal_alias_mapper([source_signal_set])
+    source_signal_sets = [parse_single_source_signal_arg("signal")]
+    source_signal_sets = restrict_by_roles(source_signal_sets)
+    daily_signals, weekly_signals = count_signal_time_types(source_signal_sets)
+    source_signal_sets, _ = create_source_signal_alias_mapper(source_signal_sets)
     # don't need the alias mapper since we don't return the source
 
     time_set = parse_single_time_arg("time")