diff --git a/api/v1/swagger/paths/auth.yaml b/api/v1/swagger/paths/auth.yaml
index 052565e4de..700023cf55 100644
--- a/api/v1/swagger/paths/auth.yaml
+++ b/api/v1/swagger/paths/auth.yaml
@@ -1183,4 +1183,4 @@
           $ref: ../swagger.yaml#/definitions/error
     x-koha-authorization:
       permissions:
-        borrowers: "1"
+        borrowers: api_validate_password
diff --git a/t/db_dependent/api/v1/password_validation.t b/t/db_dependent/api/v1/password_validation.t
index 74b025d96d..6e59d52a51 100755
--- a/t/db_dependent/api/v1/password_validation.t
+++ b/t/db_dependent/api/v1/password_validation.t
@@ -40,9 +40,22 @@ $schema->storage->txn_begin;
 my $librarian = $builder->build_object(
     {
         class => 'Koha::Patrons',
-        value => { flags => 2**4 }    # borrowers flag = 4
+        value => { flags => 0 }     # No top-level permissions
     }
 );
+
+# Ensure our librarian can see users from all branches (once list_borrowers is added)
+$builder->build(
+    {
+        source => 'UserPermission',
+        value  => {
+            borrowernumber => $librarian->borrowernumber,
+            module_bit     => 4,
+            code           => 'api_validate_password',
+        },
+    }
+);
+
 my $password = 'thePassword123';
 $librarian->set_password( { password => $password, skip_validation => 1 } );
 my $userid = $librarian->userid;