fix: 统一用户资料投影并放开头像访问

server/db/mysql/report_group_regression_test.go

@@ -54,3 +54,21 @@ func TestMessageSearchDoesNotClearScannedHead(t *testing.T) {
 		t.Fatal("message search must not clear Head after sqlx StructScan has already decoded it")
 	}
 }
+
+func TestTenantFileAccessIncludesAvatarAudienceRules(t *testing.T) {
+	source, err := os.ReadFile("tenant_adapter.go")
+	if err != nil {
+		t.Fatal(err)
+	}
+	body := string(source)
+	for _, want := range []string{
+		"INNER JOIN im_friendships AS fs",
+		"fs.user_id=? AND fs.peer_id=fml.userid AND fs.status=?",
+		"INNER JOIN im_group_members AS gm",
+		"gm.topic=fml.topic AND gm.user_id=? AND gm.member_status=?",
+	} {
+		if !strings.Contains(body, want) {
+			t.Fatalf("file ACL must include avatar audience rule %q", want)
+		}
+	}
+}