fix: list permission (#3386)

projects/app/src/pages/api/core/app/list.ts

@@ -101,7 +101,7 @@ async function handler(req: ApiRequestProps<ListAppBody>): Promise<AppListItemTy
         ? {
             $or: [idList, parseParentIdInMongo(parentId)]
           }
-        : idList;
+        : { $or: [idList, { parentId: null }] };
 
     const searchMatch = searchKey
       ? {

projects/app/src/pages/api/core/dataset/list.ts

@@ -82,7 +82,7 @@ async function handler(req: ApiRequestProps<GetDatasetListBody>) {
         ? {
             $or: [idList, parseParentIdInMongo(parentId)]
           }
-        : idList;
+        : { $or: [idList, { parentId: null }] };
 
     const searchMatch = searchKey
       ? {