refactor(storage): scope exports by owner

JobTrackerApi/Controllers/CvVariantController.cs

@@ -190,7 +190,7 @@ public sealed class CvVariantController : ControllerBase
         if (user is null) return Unauthorized();
         var render = await _variants.RenderAsync(user.Id, id, Person(user), ct);
         if (render is null) return NotFound();
-        var artifact = await _pdf.ExportAsync(new TailoredCvRenderResult(render.ThemeId, render.SuggestedFileName, render.Html), ct);
+        var artifact = await _pdf.ExportAsync(user.Id, new TailoredCvRenderResult(render.ThemeId, render.SuggestedFileName, render.Html), ct);
         return File(artifact.Bytes, "application/pdf", artifact.FileName);
     }
 

JobTrackerApi/Controllers/JobApplicationsController.cs

@@ -62,7 +62,7 @@ namespace JobTrackerApi.Controllers
 
         private sealed class ThrowingCvPdfExporter : ICvPdfExporter
         {
-            public Task<CvPdfArtifact> ExportAsync(TailoredCvRenderResult renderResult, CancellationToken cancellationToken)
+            public Task<CvPdfArtifact> ExportAsync(string ownerUserId, TailoredCvRenderResult renderResult, CancellationToken cancellationToken)
             {
                 throw new InvalidOperationException("CV PDF export is not configured for this controller instance.");
             }
@@ -1736,7 +1736,7 @@ Candidate CV/profile:
                     ? null
                     : AvatarStorage.Resolve(user.AvatarImageDataUrl);
             var rendered = RenderTailoredCv(job, document, user, photoDataUrl);
-            var artifact = await _cvPdfExporter.ExportAsync(rendered, cancellationToken);
+            var artifact = await _cvPdfExporter.ExportAsync(user.Id, rendered, cancellationToken);
             return File(artifact.Bytes, "application/pdf", artifact.FileName);
         }
 

JobTrackerApi/Controllers/ProfileCvController.cs

@@ -108,7 +108,7 @@ public sealed partial class ProfileCvController : ControllerBase
 
     private sealed class ThrowingCvPdfExporter : ICvPdfExporter
     {
-        public Task<CvPdfArtifact> ExportAsync(TailoredCvRenderResult renderResult, CancellationToken cancellationToken)
+        public Task<CvPdfArtifact> ExportAsync(string ownerUserId, TailoredCvRenderResult renderResult, CancellationToken cancellationToken)
         {
             throw new InvalidOperationException("CV PDF export is not configured for this controller instance.");
         }
@@ -479,7 +479,9 @@ public sealed partial class ProfileCvController : ControllerBase
             return StatusCode(StatusCodes.Status500InternalServerError, "The CV preview could not be prepared for PDF export.");
         }
 
-        var artifact = await _cvPdfExporter.ExportAsync(new TailoredCvRenderResult(preview.TemplateId, preview.SuggestedFileName, preview.Html), cancellationToken);
+        var user = await _users.GetUserAsync(User);
+        if (user is null) return Unauthorized();
+        var artifact = await _cvPdfExporter.ExportAsync(user.Id, new TailoredCvRenderResult(preview.TemplateId, preview.SuggestedFileName, preview.Html), cancellationToken);
         return File(artifact.Bytes, "application/pdf", artifact.FileName);
     }
 

JobTrackerApi/Controllers/PublicCvController.cs

@@ -52,7 +52,7 @@ public sealed class PublicCvController : ControllerBase
         if (result is null) return NotFound();
 
         var render = result.Value.render;
-        var artifact = await _pdf.ExportAsync(new TailoredCvRenderResult(render.ThemeId, render.SuggestedFileName, render.Html), ct);
+        var artifact = await _pdf.ExportAsync(ownerId, new TailoredCvRenderResult(render.ThemeId, render.SuggestedFileName, render.Html), ct);
         return File(artifact.Bytes, "application/pdf", artifact.FileName);
     }