fix version 1

module/ec/address/internal/logic/library/delete.go

@@ -16,12 +16,13 @@ import (
 // 删除一个地址
 func Delete(ctx context.Context, in *pb.AddressDeleteRequest) (reply *pb.StatusReply, err error) {
 	// parse authorization meta.
-	_, err = service.ParseMetaCtx(ctx, nil)
+	auth, err := service.ParseMetaCtx(ctx, nil)
 	if err != nil {
 		return nil, err
 	}
 
-	err = impl.DBService.Delete(&models.AddressLibrary{}, "id in ?", in.Id).Error
+	// 删除必须限定归属，避免越权删除他人地址
+	err = impl.DBService.Where("id in ? and owner_identity = ?", in.Id, auth.Identity).Delete(&models.AddressLibrary{}).Error
 	if err != nil {
 		printer.Error(err.Error())
 		return nil, errcode.ErrDB