fix: images resolver not filtering out image objects correctly (#2246)

src/ai/backend/manager/models/image.py

@@ -710,29 +710,41 @@ def matches_filter(
         ctx: GraphQueryContext,
         filters: set[ImageLoadFilter],
     ) -> bool:
+        """
+        Determine if the image is filtered according to the `filters` parameter.
+        """
         user_role = ctx.user["role"]
 
+        if not filters:
+            return True
+
+        # If the image filtered by any of its labels, return False early.
+        # If the image is not filtered and is determiend to be valid by any of its labels, `is_valid = True`.
+        is_valid = False
         for label in self.labels:
             match label.key:
-                case "ai.backend.features" if "operation" in label.value and ImageLoadFilter.OPERATIONAL not in filters:
-                    return False
+                case "ai.backend.features" if "operation" in label.value:
+                    if ImageLoadFilter.OPERATIONAL in filters:
+                        is_valid = True
+                    else:
+                        return False
                 case "ai.backend.customized-image.owner":
                     if (
-                        (
-                            ImageLoadFilter.CUSTOMIZED not in filters
-                            and ImageLoadFilter.CUSTOMIZED_GLOBAL not in filters
-                        )
-                        or (
-                            ImageLoadFilter.CUSTOMIZED_GLOBAL in filters
-                            and user_role != UserRole.SUPERADMIN
-                        )
-                        or (
-                            ImageLoadFilter.CUSTOMIZED in filters
-                            and label.value != f"user:{ctx.user['uuid']}"
-                        )
+                        ImageLoadFilter.CUSTOMIZED not in filters
+                        and ImageLoadFilter.CUSTOMIZED_GLOBAL not in filters
                     ):
                         return False
-        return True
+                    if ImageLoadFilter.CUSTOMIZED in filters:
+                        if label.value == f"user:{ctx.user['uuid']}":
+                            is_valid = True
+                        else:
+                            return False
+                    if ImageLoadFilter.CUSTOMIZED_GLOBAL in filters:
+                        if user_role == UserRole.SUPERADMIN:
+                            is_valid = True
+                        else:
+                            return False
+        return is_valid
 
 
 class ImageNode(graphene.ObjectType):