fix: 修复付款单权限

[slarkerino]

修复付款单查看权限问题。不然用户查看自己的付款单也需要管理权限

[slarkerino]

@gdlcf88

[gdlcf88]

Can you create a unit testing case to reproduce your problem?

[slarkerino]

Can you create a unit testing case to reproduce your problem?

this is the code in the PaymentAppService, you can see it calls base.GetAsync(id) and base.GetListAsync(input). In abp ReadOnlyAppService by default it already checks GetPolicyName and GetListPolicyName in the base class. So if it is set to manage, it doesnt matter the userId

[slarkerino]

Now this should be correct.I removed manage permission from GetPolicyName, GetListPolicyName and check manage permission if userId not match. @gdlcf88