fix: resource auth (#3327)

Author: shaohuzhang1

apps/system_manage/serializers/user_resource_permission.py

@@ -81,7 +81,7 @@ def get_queryset(self):
             'application_query_set': QuerySet(Application)
             .filter(workspace_id=self.data.get('workspace_id')),
             'workspace_user_resource_permission_query_set': QuerySet(WorkspaceUserResourcePermission).filter(
-                workspace_id=self.data.get('workspace_id'))
+                workspace_id=self.data.get('workspace_id'), user=self.data.get('user_id'))
         }
 
     def list(self, user, with_valid=True):
@@ -129,7 +129,7 @@ def edit(self, instance, user, with_valid=True):
         save_list = []
         user_resource_permission_list = instance.get('user_resource_permission_list')
         workspace_user_resource_permission_exist_list = QuerySet(WorkspaceUserResourcePermission).filter(
-            workspace_id=workspace_id)
+            workspace_id=workspace_id, user_id=user_id)
         for user_resource_permission in user_resource_permission_list:
             exist_list = [user_resource_permission_exist for user_resource_permission_exist in
                           workspace_user_resource_permission_exist_list if