diff --git a/src/api/src/backend/views/GroupSecrets.py b/src/api/src/backend/views/GroupSecrets.py index 6f9f3ac7..d4487ec8 100644 --- a/src/api/src/backend/views/GroupSecrets.py +++ b/src/api/src/backend/views/GroupSecrets.py @@ -73,7 +73,7 @@ def post(self, request, group_id, *_, **__): # Fetch the secret secret = Secret.objects.filter( - secret_id=secret_id, + id=secret_id, tenant_id=request.tenant_id, owner=request.username )