ISN, UPC, or id must be provided.