修改普通用户的数据类型转换在数据集管理看不见的问题

backend/app/core/auth.py

@@ -180,9 +180,22 @@ def filter_accessible_resource_ids(
     accessible = {r["resource_id"] for r in rows}
     if resource_type in OWNER_TABLES:
         table, column = OWNER_TABLES[resource_type]
-        with store.connect() as conn:
-            owned = conn.execute(f"SELECT id FROM {table} WHERE {column}=?", (user_id,)).fetchall()
-        accessible.update(row["id"] for row in owned)
+        if column == "payload":
+            # payload 是 JSON 字符串，需要查出后解析 created_by
+            with store.connect() as conn:
+                owned = conn.execute(f"SELECT id, {column} FROM {table}").fetchall()
+            for row in owned:
+                try:
+                    import json
+                    payload = json.loads(row[column] or "{}")
+                    if payload.get("created_by") == user_id:
+                        accessible.add(row["id"])
+                except (TypeError, ValueError):
+                    pass
+        else:
+            with store.connect() as conn:
+                owned = conn.execute(f"SELECT id FROM {table} WHERE {column}=?", (user_id,)).fetchall()
+            accessible.update(row["id"] for row in owned)
     return [rid for rid in all_ids if rid in accessible]
 
 
@@ -210,8 +223,18 @@ def filter_accessible_resource_ids_batch(
         table, column = table_info
         with store.connect() as conn:
             owned = conn.execute(
-                f"SELECT id FROM {table} WHERE id IN ({placeholders}) AND {column}=?",
-                (*resource_ids, user["id"]),
+                f"SELECT id, {column} FROM {table} WHERE id IN ({placeholders})",
+                (*resource_ids,),
             ).fetchall()
-        accessible.update(row["id"] for row in owned)
+        for row in owned:
+            owner = row[column]
+            # 如果列是 payload（JSON），需要解析后提取 created_by
+            if column == "payload":
+                try:
+                    import json
+                    owner = json.loads(owner or "{}").get("created_by")
+                except (TypeError, ValueError):
+                    owner = None
+            if owner == user["id"]:
+                accessible.add(row["id"])
     return accessible