GL-SEC-10460 write-scope-check