From 4ca420bd8408a317f2e0a985abefaffa57f90c57 Mon Sep 17 00:00:00 2001
From: Maikel Linke <maikel@email.org.au>
Date: Fri, 21 Nov 2025 14:16:41 +1100
Subject: [PATCH] Correct needed scope of access token

---
 engines/dfc_provider/app/services/proxy_notifier.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/engines/dfc_provider/app/services/proxy_notifier.rb b/engines/dfc_provider/app/services/proxy_notifier.rb
index 908398f897..a34387b40d 100644
--- a/engines/dfc_provider/app/services/proxy_notifier.rb
+++ b/engines/dfc_provider/app/services/proxy_notifier.rb
@@ -25,7 +25,7 @@ class ProxyNotifier
       grant_type: "client_credentials",
       client_id: ENV.fetch("OPENID_APP_ID", nil),
       client_secret: ENV.fetch("OPENID_APP_SECRET", nil),
-      scope: "WriteEnterprise",
+      scope: "ReadEnterprise",
     }
     response = connection.post(url, data)
     response.body["access_token"]