diff --git a/application/Api/v1/PreorderApicontroller.php b/application/Api/v1/PreorderApicontroller.php index d0a9b308c..c9f25ce30 100644 --- a/application/Api/v1/PreorderApicontroller.php +++ b/application/Api/v1/PreorderApicontroller.php @@ -94,6 +94,10 @@ class PreorderApicontroller extends mfBaseApicontroller { } } + if($preorder->partner_id != $this->me->address_id) { + return mfResponse::NotFound(["message" => "Preorder not found"]); + } + $return = $preorder->getApiArray(); if(!$return) { return mfResponse::NotFound(["message" => "Preorder not found"]);