fix: validate folder_id in list method and use request.user.id for user_id

Author: liuruibin

apps/knowledge/serializers/knowledge.py

@@ -188,6 +188,10 @@ def page(self, current_page: int, page_size: int):
 
         def list(self):
             self.is_valid(raise_exception=True)
+            folder_id = self.data.get('folder_id', self.data.get("workspace_id"))
+            root = KnowledgeFolder.objects.filter(id=folder_id).first()
+            if not root:
+                raise serializers.ValidationError(_('Folder not found'))
             workspace_manage = is_workspace_manage(self.data.get('user_id'), self.data.get('workspace_id'))
 
             return native_search(
@@ -200,7 +204,8 @@ def list(self):
                         'list_knowledge.sql' if workspace_manage else (
                             'list_knowledge_user_ee.sql' if self.is_x_pack_ee() else 'list_knowledge_user.sql'
                         )
-                    ))
+                    )
+                ),
             )
 
     class Operate(serializers.Serializer):

apps/knowledge/views/knowledge.py

@@ -41,7 +41,7 @@ def get(self, request: Request, workspace_id: str):
                 'name': request.query_params.get('name'),
                 'desc': request.query_params.get("desc"),
                 'scope': KnowledgeScope.WORKSPACE,
-                'user_id': request.query_params.get('user_id')
+                'user_id': request.user.id
             }
         ).list())