Authorization scope statements/read/mine returning no statements

[mdeboer]

What version were you using?

Open source v6.0.7 (API) and v3.1.0 (xAPI)

What steps can we follow to reproduce the behaviour?

• Create an organisation, store and client with scopes: statements/write, statements/read/mine, profile, state and an account authority.
• Store some statements (e.g. launch a module) using those clients credentials
• Request all statements (GET /data/xAPI/statements) as that client using basic authentication. Statements should show up.
• Create another client with the same scopes and authority.
• Request all statements (GET /data/xAPI/statements) as the new client and no statements should show up.

What is the actual behaviour?

It seems results are not only matched by authority but also by client key as opposed to just the authority.

Having two clients with the same authority only has each client return statements created by that exact client.

For example, this is returned:

{
    "more": "",
    "statements": []
}

What is the expected behavior?

No matter what client (key), I expect to always see statements for that authority.

Is there any additional information that will help us replicate/understand the problem?

I currently work around this by not using xAPI but the API.