#21723·meshery

[Cloud API] orgId appears to be ignored when listing public views

Author: maverickaayushCreated Sep 1, 2026Updated Sep 17, 2026
Labelskind/bug

GET /api/content/views appears to ignore the orgId query parameter when visibility=public.

Using the same authenticated test account, I tested the endpoint with three different organization IDs:

GET /api/content/views?orgId=<Meshery-org>&visibility=public&pageSize=1
GET /api/content/views?orgId=<My-org>&visibility=public&pageSize=1
GET /api/content/views?orgId=00000000-0000-0000-0000-000000000000&visibility=public&pageSize=1

All three requests returned the same result:

totalCount: 2033

The first returned view was also identical across all three requests.

### Expected Behavior

If orgId is intended to scope the request, changing the supplied organization ID should affect the returned dataset or otherwise apply the requested organization scope.

### Screenshots/Logs

Reproduction was performed against the deployed Meshery Cloud API using an authenticated test account.

Example observed result:

orgId=<Meshery-org>     → totalCount: 2033
orgId=<My-org>          → totalCount: 2033
orgId=<zero UUID>       → totalCount: 2033

The same first view was returned for each request.

### Environment
Host OS: Linux
Platform: Meshery Cloud
Meshery Server Version: Cloud deployment
Meshery Client Version: N/A
### To Reproduce
Authenticate to Meshery Cloud.
Send GET /api/content/views with visibility=public and pageSize=1.
Repeat the request with different orgId values.
Compare the totalCount and returned view IDs.
### Additional Context

The API documentation describes orgId as an organization-scoping parameter for this endpoint.

Could you confirm whether public views are intentionally global?

If public views are intended to be global, the API documentation may need clarification that orgId does not scope public-view results.

If orgId is intended to scope this endpoint, it appears not to be enforced.

I would be interested in working on this issue and submitting a fix once the intended behavior is confirmed. Please assign it to me if it is available.