855220fae5
Deploy / Staging E2E Tests (push) Has been skipped
Deploy / Build Production Runtime Images (push) Has been skipped
Deploy / Deploy Production (push) Has been skipped
Deploy / Production Browser E2E (push) Has been skipped
Deploy / Deploy Staging (push) Failing after 124h22m3s
CI/CD Pipeline / Frontend Lint (push) Failing after 124h22m11s
CI/CD Pipeline / Validate Code Quality And Tests (push) Failing after 124h22m11s
1. GET /projects/{id} 增加权限校验:非项目所有者且未被共享时返回403
(此前任何登录用户都可查看任意项目,存在越权访问漏洞)
2. 新增 DELETE /projects/{id} 接口:仅项目所有者可删除,返回403/404
- 新增 DeleteProjectUseCase(application层)
- 仓储层 delete 方法已存在,直接复用
- 与素材库等模块的权限校验模式保持一致