fix: Incorrect Scoping in Contact API (#1674)

2021-01-19 22:18:15 +08:00 · 2021-01-19 22:18:15 +08:00 · b4a547e0ae
commit b4a547e0ae
parent 12491fa8d5
1 changed files with 1 additions and 1 deletions
--- a/app/controllers/api/v1/accounts/contacts_controller.rb
+++ b/app/controllers/api/v1/accounts/contacts_controller.rb
@ -46,7 +46,7 @@ class Api::V1::Accounts::ContactsController < Api::V1::Accounts::BaseController
  rescue ActiveRecord::RecordInvalid => e
    render json: {
      message: e.record.errors.full_messages.join(', '),
-      contact: Contact.find_by(email: contact_params[:email])
+      contact: Current.account.contacts.find_by(email: contact_params[:email])
    }, status: :unprocessable_entity
  end