修复附件归属的问题

Author: liaobw

backend/super-magic-module/src/Application/SuperAgent/Service/WorkspaceAppService.php

@@ -541,6 +541,13 @@ public function getFileUrls(MagicUserAuthorization $userAuthorization, array $fi
                 continue;
             }
 
+            // 验证文件是否属于当前用户
+            $topicEntity = $this->workspaceDomainService->getTopicById($fileEntity->getTopicId());
+            if (empty($topicEntity) || $topicEntity->getUserId() !== $userAuthorization->getId()) {
+                // 如果这个话题不是本人的，不处理
+                continue;
+            }
+
             $downloadNames = [];
             if ($downloadMode == 'download') {
                 $downloadNames[$fileEntity->getFileKey()] = $fileEntity->getFileName();