diff --git a/newrelic-security-agent/src/main/java/com/newrelic/agent/security/intcodeagent/utils/RestrictionUtility.java b/newrelic-security-agent/src/main/java/com/newrelic/agent/security/intcodeagent/utils/RestrictionUtility.java
index 36f592caf..06a6f52f2 100644
--- a/newrelic-security-agent/src/main/java/com/newrelic/agent/security/intcodeagent/utils/RestrictionUtility.java
+++ b/newrelic-security-agent/src/main/java/com/newrelic/agent/security/intcodeagent/utils/RestrictionUtility.java
@@ -77,7 +77,7 @@ public static boolean hasValidAccountId(RestrictionCriteria restrictionCriteria,
             }
         }
         if(restrictionCriteria.getMappingParameters().getQuery().isEnabled()) {
-            Set<String> queryValues = getQueryString(restrictionCriteria.getMappingParameters().getHeader().getLocations(), request.getQueryParameters());
+            Set<String> queryValues = getQueryString(restrictionCriteria.getMappingParameters().getQuery().getLocations(), request.getQueryParameters());
             if(matcher(accountIds, queryValues)){
                 return true;
             }