feat: 添加顾客权限控制和订单时间限制

src/main/java/com/example/building/service/impl/OrderServiceImpl.java

@@ -171,14 +171,20 @@ public class OrderServiceImpl implements OrderService {
 
     /**
      * 获取订单详情(含明细)
+     * 顾客只能查看自己的订单
      */
     @Override
-    public Map<String, Object> getOrderDetail(String orderId) {
+    public Map<String, Object> getOrderDetail(String orderId, String userId, String role) {
         Order order = orderMapper.selectById(orderId);
         if (order == null) {
             throw new RuntimeException("订单不存在");
         }
 
+        // 顾客只能查看自己的订单
+        if ("customer".equals(role) && !userId.equals(order.getCustomerId())) {
+            throw new RuntimeException("无权查看该订单");
+        }
+
         List<OrderItem> items = orderItemMapper.selectList(new LambdaQueryWrapper<OrderItem>()
                 .eq(OrderItem::getOrderId, orderId));