[MODIFY] 越界审批增加权限校验

src/2.services/ATS.NonCustodial.Application/Impl/Business/AppBusinessApplicationService.cs

@@ -101,8 +101,16 @@ namespace ATS.NonCustodial.Application.Impl.Business
         [HttpPost]
         public async Task<IResultOutput> GetPageAsync(AppBusinessApplicationGetPageInput input)
         {
+            //获取当前用户权限下的案件ids
+            var limits = User.limits;
+            var selectLimits = await _appCaseSupervisorRepository.AsQueryable(false, true)
+                .Where(w => limits.Contains(w.UnitId.ToString()))
+                .ToListAsync();
+            var caseIdList = selectLimits.Select(w => w.CaseId).Distinct().ToList();
+
             var express = await GetExpression(input, _appBusinessApplicationRepository.AsQueryable(false, true));
             var rtn = await base.GetPageAsync<AppBusinessApplication, AppBusinessApplicationGetPageInput, AppBusinessApplicationListDto>(input, express);
+            rtn.Data = rtn.Data.Where(w => caseIdList.Contains(w.CaseId)).ToList();
             return ResultOutput.Ok(rtn);
         }