Missing auth check of approvedAll about rarity HOT 3 OPEN

I think it needs a check more similar to this line from Rarity.sol: return (spender == owner || getApproved(tokenId) == spender || isApprovedForAll(owner, spender));

from rarity.

Maybe rarity/rarity.sol's _isApprovedOrOwner function should not be internal.
rariry/rarity_crafting-materials-1.sol has this same problem.

If changed it would enable calling adventure for a bunch of summoners at once for the cellar quest, like in this contract.

from rarity.

Maybe rarity/rarity.sol's _isApprovedOrOwner function should not be internal.
rariry/rarity_crafting-materials-1.sol has this same problem.

If changed it would enable calling adventure for a bunch of summoners at once for the cellar quest, like in this contract.

In fact, this does not prevent bulk behavior, approve can also achieve the bulk target, just a little more trouble and cost increase. Suggest adding the check：https://ftmscan.com/address/0x4a33076916289486cdc975ee28ef4041a5e5702a#writeContract

from rarity.