fix(workbench): complete profile and channel flows

backend/internal/logic/documents/handlers.go

@@ -139,7 +139,10 @@ func (h *Handler) create(c *gin.Context, folder bool) {
 	input := CreateInput{Name: request.Name, ParentIdentity: request.ParentID, Markdown: request.Markdown}
 	if request.SourceInboxItemID != "" {
 		var inbox models.SaInboxItem
-		if err := h.service.database().Select("id").Where("identity = ?", request.SourceInboxItemID).First(&inbox).Error; err != nil {
+		if err := h.service.database().Select("id").Where(
+			"identity = ? AND project_id = ? AND created_by = ?",
+			request.SourceInboxItemID, projectID, userID,
+		).First(&inbox).Error; err != nil {
 			writeError(c, gorm.ErrRecordNotFound)
 			return
 		}