diff --git a/server/routes/api/urls/urls.ts b/server/routes/api/urls/urls.ts
index 077c3502a..ef1c1101e 100644
--- a/server/routes/api/urls/urls.ts
+++ b/server/routes/api/urls/urls.ts
@@ -30,7 +30,7 @@ router.post(
       const [user, document] = await Promise.all([
         User.findByPk(userId),
         Document.findByPk(documentId!, {
-          userId,
+          userId: actor.id,
         }),
       ]);
       if (!user) {
@@ -53,7 +53,9 @@ router.post(
     }
 
     const document = previewDocumentId
-      ? await Document.findByPk(previewDocumentId)
+      ? await Document.findByPk(previewDocumentId, {
+          userId: actor.id,
+        })
       : undefined;
     if (!document) {
       throw NotFoundError("Document does not exist");