diff --git a/accessEntity/api.go b/accessEntity/api.go
index 1736376..f261f1e 100644
--- a/accessEntity/api.go
+++ b/accessEntity/api.go
@@ -132,6 +132,7 @@
 	}
 	res, errRes := a.getApp(org, ids)
 	if errRes != nil {
+		w.WriteHeader(errRes.StatusCode)
 		writeJson(errRes, w, r)
 		return
 	}
diff --git a/accessEntity/data.go b/accessEntity/data.go
index 8c2450c..3961d87 100644
--- a/accessEntity/data.go
+++ b/accessEntity/data.go
@@ -425,8 +425,8 @@
 		)
 	}
 	query += " AND a.tenant_id IN " + sql_select_tenant_org
-	log.Debugf("getAppByAppName: %v", query, org)
-	err = d.GetDb().QueryStructs(&apps, query)
+	log.Debugf("getAppByAppName: %v", query)
+	err = d.GetDb().QueryStructs(&apps, query, org)
 	return
 }
 
@@ -449,7 +449,7 @@
 	query := selectAppCredentialByConsumerKey(
 		"'"+consumerKey+"'",
 		cols...,
-	) + " AND a.tenant_id IN " + sql_select_tenant_org
+	) + " AND ac.tenant_id IN " + sql_select_tenant_org
 	log.Debugf("getAppCredentialByConsumerKey: %v", query)
 	err = d.GetDb().QueryStructs(&appCredentials, query, org)
 	return