In the AuthorizationComponent we have: public function applyScope($resource, $action = null) Verses this in the IdentityDecorator: public function applyScope($action, $resource) Is there a reason for the mismatch?