AccessIdentifiers bug manipulated endpoint