fix(review): allow namespace admins to review own submissions

server/skillhub-domain/src/main/java/com/iflytek/skillhub/domain/review/ReviewPermissionChecker.java

@@ -28,7 +28,12 @@ public boolean canReview(ReviewTask task,
                              Map<Long, NamespaceRole> userNamespaceRoles,
                              Set<String> platformRoles) {
         if (task.getSubmittedBy().equals(userId)) {
-            return platformRoles.contains("SUPER_ADMIN");
+            if (platformRoles.contains("SUPER_ADMIN")) {
+                return true;
+            }
+            NamespaceRole role = userNamespaceRoles.get(task.getNamespaceId());
+            return hasPlatformReviewRole(platformRoles)
+                    && (role == NamespaceRole.ADMIN || role == NamespaceRole.OWNER);
         }
         return canReviewNamespace(task.getNamespaceId(), namespaceType, userNamespaceRoles, platformRoles);
     }

server/skillhub-domain/src/test/java/com/iflytek/skillhub/domain/review/ReviewPermissionCheckerTest.java

@@ -26,13 +26,37 @@ void regularUserCannotReviewOwnSubmission() {
     }
 
     @Test
-    void skillAdminCannotReviewOwnSubmission() {
+    void skillAdminCannotReviewOwnSubmissionWithoutNamespaceRole() {
         String userId = "user-1";
         ReviewTask task = new ReviewTask(1L, 10L, userId);
         assertFalse(checker.canReview(task, userId,
                 NamespaceType.TEAM, Map.of(), Set.of("SKILL_ADMIN")));
     }
 
+    @Test
+    void skillAdminNamespaceAdminCanReviewOwnSubmission() {
+        String userId = "user-1";
+        ReviewTask task = new ReviewTask(1L, 10L, userId);
+        assertTrue(checker.canReview(task, userId,
+                NamespaceType.TEAM, Map.of(10L, NamespaceRole.ADMIN), Set.of("SKILL_ADMIN")));
+    }
+
+    @Test
+    void skillAdminNamespaceOwnerCanReviewOwnSubmission() {
+        String userId = "user-1";
+        ReviewTask task = new ReviewTask(1L, 10L, userId);
+        assertTrue(checker.canReview(task, userId,
+                NamespaceType.TEAM, Map.of(10L, NamespaceRole.OWNER), Set.of("SKILL_ADMIN")));
+    }
+
+    @Test
+    void skillAdminNamespaceMemberCannotReviewOwnSubmission() {
+        String userId = "user-1";
+        ReviewTask task = new ReviewTask(1L, 10L, userId);
+        assertFalse(checker.canReview(task, userId,
+                NamespaceType.TEAM, Map.of(10L, NamespaceRole.MEMBER), Set.of("SKILL_ADMIN")));
+    }
+
     @Test
     void superAdminCannotReviewOwnSubmission() {
         String userId = "user-1";