diff --git a/server/api/documents.js b/server/api/documents.js index 9c31d94d..653a4479 100644 --- a/server/api/documents.js +++ b/server/api/documents.js @@ -814,7 +814,9 @@ router.post('documents.move', auth(), async ctx => { } if (parentDocumentId) { - const parent = await Document.findByPk(parentDocumentId, user.id); + const parent = await Document.findByPk(parentDocumentId, { + userId: user.id, + }); authorize(user, 'update', parent); }