Skip to content

[Bug] Incorrect permission scope in API spec for load-entitlements-by-sources #1006

@smeshbash

Description

@smeshbash

Summary

The Identity Security Cloud API spec for load-entitlements-by-sources appears to list the wrong required permission.

Where I see the problem

  • API version: v2025
  • Endpoint: POST /load-entitlements-by-sources
  • File (from this repo): static/api-specs/idn/v2025/paths/load-entitlements-by-sources.yaml

What is currently in the spec

Under security -> userAuth, the scope is:

  • idn:entitlement:manage

What I expected / suggested fix

Based on how this API behaves and other examples, I believe the scope should be:

  • idn:sources:manage
  • idn:entitlement:manage

Suggested YAML change:

security:
  - userAuth:
      - idn:sources:manage
      - idn:entitlement:manage

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions