perf: 优化主题权限

Yi.Abp.Net8/module/bbs/Yi.Framework.Bbs.Domain/Managers/ForumManager.cs

@@ -1,8 +1,10 @@
 using Microsoft.AspNetCore.Http;
 using Microsoft.AspNetCore.Mvc;
 using Volo.Abp.Domain.Services;
+using Volo.Abp.Users;
 using Yi.Framework.Bbs.Domain.Entities.Forum;
 using Yi.Framework.Bbs.Domain.Managers.ArticleImport;
+using Yi.Framework.Bbs.Domain.Shared.Consts;
 using Yi.Framework.Bbs.Domain.Shared.Enums;
 using Yi.Framework.Bbs.Domain.Shared.Model;
 using Yi.Framework.SqlSugarCore.Abstractions;
@@ -44,6 +46,38 @@ namespace Yi.Framework.Bbs.Domain.Managers
             return await _commentRepository.InsertReturnEntityAsync(entity);
         }
 
+        /// <summary>
+        /// 校验主题查询权限
+        /// </summary>
+        /// <param name="discussId"></param>
+        /// <returns></returns>
+        /// <exception cref="UserFriendlyException"></exception>
+        public async Task VerifyDiscussPermissionAsync(Guid discussId,Guid? userId)
+        {
+            var discuss = await _discussRepository.GetFirstAsync(x => x.Id == discussId);
+            if (discuss is null)
+            {
+                throw new UserFriendlyException(DiscussConst.No_Exist);
+            }
+
+            if (discuss.PermissionType == DiscussPermissionTypeEnum.Oneself)
+            {
+                if (discuss.CreatorId != userId)
+                {
+                    throw new UserFriendlyException(DiscussConst.Privacy);
+                }
+            }
+
+            if (discuss.PermissionType == DiscussPermissionTypeEnum.User)
+            {
+                if (discuss.CreatorId !=userId &&
+                    !discuss.PermissionUserIds.Contains(userId?? Guid.Empty))
+                {
+                    throw new UserFriendlyException(DiscussConst.Privacy);
+                }
+            }
+        }
+        
         /// <summary>
         /// 导入文章
         /// </summary>