While I was changing scopes on some routes, I noticed something:

• changes on the scope requirements do impact the API behaviour expectedly
• however in the unittest, even if the get_current_access yields an access with insufficient scope, the request is still being processed

We would need to investigate and fix this to be able to check scopes in the unittests.