Scope unit and accessory data to owning users

Signed-off-by: Sean Du <do4suki@gmail.com>
2026-07-13 08:03:10 +08:00
parent 16ab2549d7
commit 96b7951ee1
14 changed files with 67 additions and 21 deletions
@@ -26,7 +26,8 @@ func favorite(ctx *gin.Context) {
 		FavoriteFlag: req.FavoriteFlag != 0,
 	}
 	_, err = ss.UserEng.Table(new(usermodel.UserUnitData)).
-		ID(req.UnitOwningUserID).Cols("favorite_flag").Update(&data)
+		Where("user_id = ? AND unit_owning_user_id = ?", ss.UserID, req.UnitOwningUserID).
+		Cols("favorite_flag").Update(&data)
 	if ss.CheckErr(err) {
 		return
 	}