k88936
72cdabbef3
定点引用查询补上调用方必须传本人 user_id 的说明
- server-rs/crates/api-server/src/editor_project.rs：resolve_editor_reference_record_by_id_for_owner 从 pub 收窄到 pub(crate) 后授权边界移到调用方，给函数补上「必须传已认证用户自己的 ID，本函数不做授权」的前置条件说明，避免后续 crate 内调用方传入客户端可控的 owner 造成越权读取
2026-09-24 17:43:13 +08:00
..
2026-08-15 15:12:05 +08:00
2026-08-31 10:51:11 +08:00
2026-09-24 17:43:13 +08:00
2026-09-20 16:35:04 +08:00
2026-08-27 22:18:16 +08:00
2026-09-21 16:06:23 +08:00
2026-09-01 16:28:34 +08:00
2026-07-31 11:30:48 +08:00
2026-09-23 19:06:02 +08:00
2026-09-23 11:46:39 +08:00
2026-09-23 19:06:02 +08:00
2026-09-15 00:50:36 +08:00
2026-09-20 15:32:48 +08:00
2026-09-15 19:43:35 +08:00
2026-07-23 14:52:57 +08:00
2026-09-20 15:32:48 +08:00
2026-05-27 21:57:34 +08:00
2026-09-16 01:06:34 +08:00
2026-09-19 12:29:19 +08:00
2026-07-18 21:17:35 +08:00
2026-09-23 19:06:02 +08:00
2026-05-10 13:18:46 +08:00
2026-09-23 18:59:05 +08:00
2026-08-17 11:34:15 +08:00
2026-09-22 00:53:47 +08:00
2026-06-11 22:33:05 +08:00
2026-09-24 15:28:01 +08:00
2026-07-16 18:33:06 +08:00
2026-05-22 03:06:41 +08:00
2026-09-24 15:28:01 +08:00
2026-09-24 15:28:01 +08:00
2026-05-06 12:52:47 +08:00