xinmi/internal/im/personal_channel_access.go

package im

import (
	"context"

	"github.com/Tencent/WeKnora/internal/types"
	"gorm.io/gorm"
)

// A digital human's default Agent carries its creator's personal connections.
// Tenant administrator privileges do not transfer that personal ownership.
func (s *Service) CheckPersonalChannelAgentAccess(ctx context.Context, agentID string, tenantID uint64) error {
	var human types.DigitalHuman
	err := s.db.WithContext(ctx).Select("id", "owner_id").Where("primary_agent_id = ? AND tenant_id = ?", agentID, tenantID).First(&human).Error
	if err == gorm.ErrRecordNotFound {
		return nil
	}
	if err != nil {
		return err
	}
	userID, hasUser := types.UserIDFromContext(ctx)
	if !hasUser || types.IsSyntheticUserID(userID) || userID != human.OwnerID {
		return gorm.ErrRecordNotFound
	}
	return nil
}

func excludeOtherPersonalChannels(query *gorm.DB, ctx context.Context) *gorm.DB {
	userID, hasUser := types.UserIDFromContext(ctx)
	if !hasUser || types.IsSyntheticUserID(userID) {
		userID = ""
	}
	return query.Where(`NOT EXISTS (SELECT 1 FROM digital_humans AS dh
		WHERE dh.primary_agent_id = c.agent_id AND dh.tenant_id = c.tenant_id
		AND dh.deleted_at IS NULL AND dh.owner_id <> ?)`, userID)
}