Security fix for promotion