diff --git a/apps/web/app/api/video/ai/route.ts b/apps/web/app/api/video/ai/route.ts index f1de882018..59919a10a8 100644 --- a/apps/web/app/api/video/ai/route.ts +++ b/apps/web/app/api/video/ai/route.ts @@ -3,7 +3,7 @@ import { getCurrentUser } from "@cap/database/auth/session"; import { users, videos } from "@cap/database/schema"; import type { VideoMetadata } from "@cap/database/types"; import type { Video } from "@cap/web-domain"; -import { eq } from "drizzle-orm"; +import { and, eq } from "drizzle-orm"; import type { NextRequest } from "next/server"; import { startAiGeneration } from "@/lib/generate-ai"; import { isAiGenerationEnabled } from "@/utils/flags"; @@ -30,7 +30,7 @@ export async function GET(request: NextRequest) { const result = await db() .select() .from(videos) - .where(eq(videos.id, videoId)); + .where(and(eq(videos.id, videoId), eq(videos.ownerId, user.id))); if (result.length === 0 || !result[0]) { return Response.json( { error: true, message: "Video not found" },