Explicitly search secret only in current organizer's OrderPositions

src/pretix/api/views/checkin.py

@@ -165,6 +165,7 @@ class CheckinListViewSet(viewsets.ModelViewSet):
 
         if not serializer.validated_data.get('position'):
             kwargs['position'] = OrderPosition.all.filter(
+                organizer=self.request.organizer,
                 secret=serializer.validated_data['raw_barcode']
             ).first()