diff --git a/pkg/auth/scope/publicshare.go b/pkg/auth/scope/publicshare.go
index 49bec8cb8e9..aacd14b746a 100644
--- a/pkg/auth/scope/publicshare.go
+++ b/pkg/auth/scope/publicshare.go
@@ -79,6 +79,10 @@ func publicshareScope(ctx context.Context, scope *authpb.Scope, resource interfa
 		return checkStorageRef(ctx, &share, &provider.Reference{ResourceId: v.ResourceInfo.Id}, client, mgr), nil
 	case *gatewayv1beta1.OpenInAppRequest:
 		return checkStorageRef(ctx, &share, v.GetRef(), client, mgr), nil
+	case *provider.SetArbitraryMetadataRequest:
+		return checkStorageRef(ctx, &share, v.GetRef(), client, mgr), nil
+	case *provider.UnsetArbitraryMetadataRequest:
+		return checkStorageRef(ctx, &share, v.GetRef(), client, mgr), nil
 
 	case *userv1beta1.GetUserByClaimRequest:
 		return true, nil
diff --git a/pkg/auth/scope/resourceinfo.go b/pkg/auth/scope/resourceinfo.go
index 845fac299be..5e7711040d9 100644
--- a/pkg/auth/scope/resourceinfo.go
+++ b/pkg/auth/scope/resourceinfo.go
@@ -67,6 +67,10 @@ func resourceinfoScope(_ context.Context, scope *authpb.Scope, resource interfac
 		return checkResourceInfo(&r, v.GetSource()) && checkResourceInfo(&r, v.GetDestination()), nil
 	case *provider.InitiateFileUploadRequest:
 		return checkResourceInfo(&r, v.GetRef()), nil
+	case *provider.SetArbitraryMetadataRequest:
+		return true, nil
+	case *provider.UnsetArbitraryMetadataRequest:
+		return true, nil
 
 	case string:
 		return checkResourcePath(v), nil