From 0904ac984bb2aff0a862a0157f8f2feead1b1c83 Mon Sep 17 00:00:00 2001
From: Adam Soltys <asoltys@gmail.com>
Date: Thu, 17 Sep 2020 00:55:40 -0700
Subject: use current account for internal payments

---
 routes/users.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'routes/users.js')

diff --git a/routes/users.js b/routes/users.js
index 5de71a54..e92bc874 100644
--- a/routes/users.js
+++ b/routes/users.js
@@ -455,7 +455,7 @@ app.post(
 
     try {
       const account = await db.Account.findOne({
-        where: { id }
+        where: { id, user_id: user.id }
       });
 
       user.account_id = account.id;
-- 
cgit v1.2.3