diff --git a/packages/trpc/server/routers/viewer/payments/chargeCard.handler.ts b/packages/trpc/server/routers/viewer/payments/chargeCard.handler.ts index 2821f8e822..98d177e482 100644 --- a/packages/trpc/server/routers/viewer/payments/chargeCard.handler.ts +++ b/packages/trpc/server/routers/viewer/payments/chargeCard.handler.ts @@ -85,6 +85,19 @@ export const chargeCardHandler = async ({ ctx, input }: ChargeCardHandlerOptions ? { teamId: booking.eventType.teamId } : { userId: ctx.user.id }; + if (booking.eventType?.teamId) { + const userIsInTeam = await prisma.membership.findFirst({ + where: { + userId: ctx.user.id, + teamId: booking.eventType?.teamId, + }, + }); + + if (!userIsInTeam) { + throw new TRPCError({ code: "UNAUTHORIZED", message: "User is not in team" }); + } + } + const paymentCredential = await prisma.credential.findFirst({ where: { ...idToSearchObject,