diff --git a/gateway/enforcer/internal/authorization/scope_validation.go b/gateway/enforcer/internal/authorization/scope_validation.go
index aae80c811..41846482e 100644
--- a/gateway/enforcer/internal/authorization/scope_validation.go
+++ b/gateway/enforcer/internal/authorization/scope_validation.go
@@ -40,8 +40,8 @@ func ValidateScopes(rch *requestconfig.Holder, subAppDataStore *datastore.Subscr
 		}
 	}
 	found := false
-	for requiredScope := range requiredScopes {
-		for scope := range scopes {
+	for _, requiredScope := range requiredScopes {
+		for _, scope := range scopes {
 			if requiredScope == scope {
 				found = true
 				break