id is a routing address. The authorization subject is the finding that owns the block named in the request body, resolved server-side.id the write is refused with 404, so you cannot address one finding in the path while recording an audit against a block of another.Authorization: ********************curl --location '/api/resources//citation-audits' \
--header 'X-Temper-Surface;' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '{
"block_id": "bd8cc6cb-1750-49ca-a3b6-034ebc9ab225",
"reason": "string",
"source": {
"kind": "event",
"value": "a860a344-d7b2-406e-828e-8d442f23f344"
},
"value": 0
}'{
"error": {
"code": "string",
"details": {
"cli_command": "string",
"display_name": "string",
"email": "string",
"refusal": {
"kind": "no_standing"
},
"request_url": "string"
},
"message": "string",
"precondition": {
"failed": [
{
"current": null,
"expected": null,
"key": "string",
"tier": "open"
}
]
}
}
}