diff --git a/apps/trust/src/components/RequestAccessDialog.tsx b/apps/trust/src/components/RequestAccessDialog.tsx
index 52a357898..6597c9cad 100644
--- a/apps/trust/src/components/RequestAccessDialog.tsx
+++ b/apps/trust/src/components/RequestAccessDialog.tsx
@@ -67,6 +67,7 @@ export function RequestAccessDialog({
           if (error.field === "email") {
             setError(error.field, {message: error.message})
           }
+          return;
         }
         toast({
           title: __("Error"),
diff --git a/pkg/server/api/trust/v1/v1_resolver.go b/pkg/server/api/trust/v1/v1_resolver.go
index 7f9a2a9cf..70a84de8e 100644
--- a/pkg/server/api/trust/v1/v1_resolver.go
+++ b/pkg/server/api/trust/v1/v1_resolver.go
@@ -361,7 +361,7 @@ func (r *mutationResolver) RequestDocumentAccess(ctx context.Context, input type
 	email := input.Email
 	tokenData := TokenAccessFromContext(ctx)
 	if tokenData != nil {
-		*email = tokenData.Email
+		email = &tokenData.Email
 	}
 	if email == nil {
 		return nil, fmt.Errorf("email is required for unauthenticated users")
diff --git a/pkg/validator/validator_string.go b/pkg/validator/validator_string.go
index 30e152f7f..6fcd21904 100644
--- a/pkg/validator/validator_string.go
+++ b/pkg/validator/validator_string.go
@@ -258,7 +258,7 @@ func NotOneOfSlice[T any](disallowed []T) ValidatorFunc {
 		// First try exact match with DeepEqual
 		for _, disallowedVal := range disallowed {
 			if reflect.DeepEqual(actualValue, disallowedVal) {
-				newValidationError(
+				return newValidationError(
 					ErrorCodeInvalidEnum,
 					fmt.Sprintf("must not be one of: %s", strings.Join(disallowedStrings, ", ")),
 				)
@@ -268,7 +268,7 @@ func NotOneOfSlice[T any](disallowed []T) ValidatorFunc {
 		// Then try string comparison (for custom string types)
 		valueStr := fmt.Sprint(actualValue)
 		if disallowedMap[valueStr] {
-			newValidationError(
+			return newValidationError(
 				ErrorCodeInvalidEnum,
 				fmt.Sprintf("must not be one of: %s", strings.Join(disallowedStrings, ", ")),
 			)