越权

internal/service/agent_recharge/service.go

@@ -411,7 +411,7 @@ func (s *Service) GetByID(ctx context.Context, id uint) (*dto.AgentRechargeRespo
 	record, err := s.agentRechargeStore.GetByID(ctx, id)
 	if err != nil {
 		if err == gorm.ErrRecordNotFound {
-			return nil, errors.New(errors.CodeNotFound, "充值记录不存在")
+			return nil, errors.New(errors.CodeForbidden, "无权限操作该资源或资源不存在")
 		}
 		return nil, errors.Wrap(errors.CodeDatabaseError, err, "查询充值记录失败")
 	}
@@ -444,7 +444,7 @@ func (s *Service) List(ctx context.Context, req *dto.AgentRechargeListRequest) (
 		pageSize = constants.DefaultPageSize
 	}
 
-	query := s.db.WithContext(ctx).Model(&model.AgentRechargeRecord{})
+	query := middleware.ApplyShopFilter(ctx, s.db.WithContext(ctx).Model(&model.AgentRechargeRecord{}))
 
 	if req.ShopID != nil {
 		query = query.Where("shop_id = ?", *req.ShopID)