feat: refine content media access rules

backend/app/services/content_test.go

@@ -116,14 +116,21 @@ func (s *ContentTestSuite) Test_Get() {
 		models.ContentQuery.WithContext(ctx).Create(content)
 
 		member := &models.User{Nickname: "Member", Username: "member1", Phone: "13800000003"}
+		admin := &models.User{Nickname: "Admin", Username: "admin1", Phone: "13800000005"}
 		guest := &models.User{Nickname: "Guest", Username: "guest1", Phone: "13800000004"}
-		models.UserQuery.WithContext(ctx).Create(member, guest)
+		models.UserQuery.WithContext(ctx).Create(member, admin, guest)
 		models.TenantUserQuery.WithContext(ctx).Create(&models.TenantUser{
 			TenantID: 1,
 			UserID:   member.ID,
 			Role:     types.Array[consts.TenantUserRole]{consts.TenantUserRoleMember},
 			Status:   consts.UserStatusVerified,
 		})
+		models.TenantUserQuery.WithContext(ctx).Create(&models.TenantUser{
+			TenantID: 1,
+			UserID:   admin.ID,
+			Role:     types.Array[consts.TenantUserRole]{consts.TenantUserRoleTenantAdmin},
+			Status:   consts.UserStatusVerified,
+		})
 
 		tenantOnly := &models.Content{
 			TenantID:   1,
@@ -152,6 +159,38 @@ func (s *ContentTestSuite) Test_Get() {
 		}
 		models.ContentAssetQuery.WithContext(ctx).Create(ca)
 
+		tenantMain := &models.MediaAsset{
+			TenantID:  1,
+			UserID:    author.ID,
+			ObjectKey: "tenant_main.mp4",
+			Type:      consts.MediaAssetTypeVideo,
+		}
+		tenantPrev := &models.MediaAsset{
+			TenantID:  1,
+			UserID:    author.ID,
+			ObjectKey: "tenant_preview.mp4",
+			Type:      consts.MediaAssetTypeVideo,
+		}
+		models.MediaAssetQuery.WithContext(ctx).Create(tenantMain, tenantPrev)
+		models.ContentAssetQuery.WithContext(ctx).Create(
+			&models.ContentAsset{
+				TenantID:  1,
+				UserID:    author.ID,
+				ContentID: tenantOnly.ID,
+				AssetID:   tenantMain.ID,
+				Sort:      1,
+				Role:      consts.ContentAssetRoleMain,
+			},
+			&models.ContentAsset{
+				TenantID:  1,
+				UserID:    author.ID,
+				ContentID: tenantOnly.ID,
+				AssetID:   tenantPrev.ID,
+				Sort:      2,
+				Role:      consts.ContentAssetRolePreview,
+			},
+		)
+
 		// Set context to author
 		ctx = context.WithValue(ctx, consts.CtxKeyUser, author.ID)
 
@@ -168,6 +207,14 @@ func (s *ContentTestSuite) Test_Get() {
 			detail, err := Content.Get(ctx, tenantID, member.ID, tenantOnly.ID)
 			So(err, ShouldBeNil)
 			So(detail.Title, ShouldEqual, "Member Only")
+			So(len(detail.MediaUrls), ShouldEqual, 2)
+		})
+
+		Convey("should allow tenant_only content for admin", func() {
+			detail, err := Content.Get(ctx, tenantID, admin.ID, tenantOnly.ID)
+			So(err, ShouldBeNil)
+			So(detail.Title, ShouldEqual, "Member Only")
+			So(len(detail.MediaUrls), ShouldEqual, 2)
 		})
 
 		Convey("should reject tenant_only content for non-member", func() {