From d2d2bfd36f03cf980d741baa165691a515ea8756 Mon Sep 17 00:00:00 2001
From: Hemachandar <hmac.devo@gmail.com>
Date: Tue, 17 Feb 2026 17:16:49 +0530
Subject: [PATCH] base scope

---
 app/controllers/shared/api.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/controllers/shared/api.php b/app/controllers/shared/api.php
index ecea032a89..cc0dc69df7 100644
--- a/app/controllers/shared/api.php
+++ b/app/controllers/shared/api.php
@@ -301,7 +301,7 @@ Http::init()
                 $projectId = explode('/', $uri)[3];
             }
 
-            $scopes = []; // Reset scope if admin
+            $scopes = isset($roles['analyst']) ? $roles['analyst']['scopes'] : []; // Base scope for admin users
             foreach ($adminRoles as $role) {
                 $isTeamWideRole = !str_starts_with($role, 'project-');
                 $isProjectSpecificRole = $projectId !== 'console' && str_starts_with($role, 'project-' . $projectId);