From 3154cb07fe035f1d7f2b1aaf7c7ce12638ee19d0 Mon Sep 17 00:00:00 2001
From: Thomas Kaul <4159106+dtslvr@users.noreply.github.com>
Date: Wed, 14 Oct 2026 16:47:24 +0200
Subject: [PATCH] Restrict update of account balance to user

---
 apps/api/src/app/account-balance/account-balance.service.ts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/apps/api/src/app/account-balance/account-balance.service.ts b/apps/api/src/app/account-balance/account-balance.service.ts
index ad990c66bd..c002f89c7d 100644
--- a/apps/api/src/app/account-balance/account-balance.service.ts
+++ b/apps/api/src/app/account-balance/account-balance.service.ts
@@ -70,6 +70,7 @@ export class AccountBalanceService {
         value: balance
       },
       where: {
+        userId,
         accountId_date: {
           accountId,
           date: resetHours(parseISO(date))