From cacc0514374b2e9badbb0749bb9a4093ef98de3b Mon Sep 17 00:00:00 2001
From: Mira Weller <weller@rami.io>
Date: Fri, 7 Feb 2025 12:59:16 +0100
Subject: [PATCH] Explicitly search secret only in current organizer's
 OrderPositions

---
 src/pretix/api/views/checkin.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/pretix/api/views/checkin.py b/src/pretix/api/views/checkin.py
index 82f0eac191..e26297e3c5 100644
--- a/src/pretix/api/views/checkin.py
+++ b/src/pretix/api/views/checkin.py
@@ -165,6 +165,7 @@ class CheckinListViewSet(viewsets.ModelViewSet):
 
         if not serializer.validated_data.get('position'):
             kwargs['position'] = OrderPosition.all.filter(
+                organizer=self.request.organizer,
                 secret=serializer.validated_data['raw_barcode']
             ).first()