1 files changed, 7 insertions, 0 deletions
diff --git a/app/models/payment.rb b/app/models/payment.rb
index 5d5e862..4839de8 100644
--- a/app/models/payment.rb
+++ b/app/models/payment.rb
@@ -5,4 +5,11 @@
 class Payment < ApplicationRecord
   has_one :order
   belongs_to :card
+  validate :card_belongs_to_user
+
+  def card_belongs_to_user
+    return unless order.user_account.cards.find_by(id: card.id).nil?
+
+    errors.add(:card_id, "doesn't belong to user")
+  end
 end