diff --git a/server/router/api/v1/acl.go b/server/router/api/v1/acl.go
index 99c24c97..6e974d31 100644
--- a/server/router/api/v1/acl.go
+++ b/server/router/api/v1/acl.go
@@ -224,7 +224,7 @@ func (in *GRPCAuthInterceptor) authenticateBySession(ctx context.Context, sessio
 	}
 
 	// Get user sessions and validate the sessionID
-	sessions, err := in.Store.GetUserSessions(ctx, userID)
+	sessions, err := in.Store.GetUserSessions(ctx, user.ID)
 	if err != nil {
 		return nil, errors.Wrap(err, "failed to get user sessions")
 	}