If you just need to plug the hole, you can pretty easily set all entitlements for source in bulk using the PowerShell SDK