06/01 Review and optimize on UI/UX, security, and functionality

2026-06-01 15:33:28 -04:00
parent 3d0ebc92c6
commit 8ca54827b2
6 changed files with 258 additions and 137 deletions
@@ -128,7 +128,10 @@ def map_accounts(enrollment_id):
                db.session.flush()
                ta.pfm_account_id = new_acct.id
            elif val.isdigit():
-                ta.pfm_account_id = int(val)
+                acct_id = int(val)
+                # Verify the account actually exists and belongs to this app
+                if Account.query.filter_by(id=acct_id, is_active=True).first():
+                    ta.pfm_account_id = acct_id
            # val == '' means skip this account
        db.session.commit()