fix tenant scoping for group business tables

2026-09-23 10:10:08 +08:00
parent 35a70ce9ff
commit 7f0903cd31
6 changed files with 119 additions and 114 deletions
@@ -5270,7 +5270,7 @@ func (a *adapter) TenantFileUserHasAccess(id t.TenantID, fid string, uid t.Uid)
 				SELECT 1 FROM im_group_files AS gf
 				INNER JOIN im_subscriptions AS s
 					ON s.tenant_id=fu.tenant_id AND s.topic=gf.topic AND s.userid=?
-				WHERE (gf.file_id=? OR gf.file_id LIKE CONCAT(?,'.%%')) AND gf.status='active'
+				WHERE gf.tenant_id=fu.tenant_id AND (gf.file_id=? OR gf.file_id LIKE CONCAT(?,'.%%')) AND gf.status='active'
 					AND s.deletedat IS NULL AND INSTR(s.modewant,'R')>0 AND INSTR(s.modegiven,'R')>0
 			)
 		) LIMIT 1`, tenantFriendshipsTable(id), tenantMessagesTable(id))),