diff --git a/apps/api/src/app/activities/activities.controller.ts b/apps/api/src/app/activities/activities.controller.ts
index dcf05bd47..bb02fcac5 100644
--- a/apps/api/src/app/activities/activities.controller.ts
+++ b/apps/api/src/app/activities/activities.controller.ts
@@ -110,8 +110,8 @@ export class ActivitiesController {
 
     if (!activity) {
       throw new HttpException(
-        getReasonPhrase(StatusCodes.FORBIDDEN),
-        StatusCodes.FORBIDDEN
+        getReasonPhrase(StatusCodes.NOT_FOUND),
+        StatusCodes.NOT_FOUND
       );
     }
 
@@ -298,7 +298,8 @@ export class ActivitiesController {
     @Body() data: UpdateOrderDto
   ) {
     const originalActivity = await this.activitiesService.order({
-      id
+      id,
+      userId: this.request.user.id
     });
 
     if (!originalActivity) {
@@ -308,13 +309,6 @@ export class ActivitiesController {
       );
     }
 
-    if (originalActivity.userId !== this.request.user.id) {
-      throw new HttpException(
-        getReasonPhrase(StatusCodes.FORBIDDEN),
-        StatusCodes.FORBIDDEN
-      );
-    }
-
     const date = parseISO(data.date);
 
     const accountId = data.accountId;