fix: 角色能看到未授权项目的问题

spug_api/apps/repository/views.py

@@ -17,11 +17,12 @@ import json
 class RepositoryView(View):
     @auth('deploy.repository.view|deploy.request.add|deploy.request.edit')
     def get(self, request):
+        apps = request.user.deploy_perms['apps']
         deploy_id = request.GET.get('deploy_id')
         data = Repository.objects.annotate(
             app_name=F('app__name'),
             env_name=F('env__name'),
-            created_by_user=F('created_by__nickname'))
+            created_by_user=F('created_by__nickname')).filter(deploy_id__in=apps)
         if deploy_id:
             data = data.filter(deploy_id=deploy_id, status='5')
             return json_response([x.to_view() for x in data])