chore: add news fragment for PR #13032

jopemachine · jopemachine · commit ab0d23a3f0a5 · 2026-07-22T16:28:03.000+09:00
diff --git a/changes/13032.fix.md b/changes/13032.fix.md
@@ -0,0 +1 @@
+Gate the app config fragment scoped search with scope RBAC by modelling it as a scope action acting at the single scope the request names, replacing the multi-scope bulk action that reached the processor with no permission validation.

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+Gate the app config fragment scoped search with scope RBAC by modelling it as a scope action acting at the single scope the request names, replacing the multi-scope bulk action that reached the processor with no permission validation.`