|
|
|
@ -23,7 +23,7 @@ class DiyFormController extends AdminController |
|
|
|
return Grid::make(new DiyForm(['fields']), function (Grid $grid) { |
|
|
|
$grid->disableViewButton(); |
|
|
|
|
|
|
|
$grid->model()->where('supplier_id', Admin::user()->id)->orderBy('id', 'desc'); |
|
|
|
$grid->model()->where(['merchant_id' => Admin::user()->id, 'type' => 1])->orderBy('id', 'desc'); |
|
|
|
|
|
|
|
$grid->column('id')->sortable(); |
|
|
|
$grid->column('name'); |
|
|
|
@ -62,7 +62,7 @@ class DiyFormController extends AdminController |
|
|
|
{ |
|
|
|
return Show::make($id, new DiyForm(['fields']), function (Show $show) { |
|
|
|
//不允许查看非自己的数据
|
|
|
|
if ($show->model()->supplier_id != Admin::user()->id) { |
|
|
|
if ($show->model()->merchant_id != Admin::user()->id || $show->model()->type != 1) { |
|
|
|
Admin::exit('数据不存在'); |
|
|
|
} |
|
|
|
|
|
|
|
@ -86,7 +86,7 @@ class DiyFormController extends AdminController |
|
|
|
$form->disableViewButton(); |
|
|
|
|
|
|
|
//不允许编辑非自己数据
|
|
|
|
if ($form->isEditing() && $form->model()->supplier_id != Admin::user()->id) { |
|
|
|
if ($form->isEditing() && ($form->model()->merchant_id != Admin::user()->id || $form->model()->type != 1)) { |
|
|
|
return $form->response()->error('数据不存在'); |
|
|
|
} |
|
|
|
|
|
|
|
@ -107,7 +107,7 @@ class DiyFormController extends AdminController |
|
|
|
}); |
|
|
|
})->saving(function (Form $form) { |
|
|
|
//不允许编辑非自己数据
|
|
|
|
if ($form->isEditing() && $form->model()->supplier_id != Admin::user()->id) { |
|
|
|
if ($form->isEditing() && ($form->model()->merchant_id != Admin::user()->id || $form->model()->type != 1)) { |
|
|
|
return $form->response()->error('数据不存在'); |
|
|
|
} |
|
|
|
|
|
|
|
@ -115,11 +115,12 @@ class DiyFormController extends AdminController |
|
|
|
return $form->response()->error('字段为空,请先新增字段'); |
|
|
|
} |
|
|
|
|
|
|
|
$form->hidden(['supplier_id']); |
|
|
|
$form->supplier_id = Admin::user()->id; |
|
|
|
$form->hidden(['merchant_id']); |
|
|
|
$form->merchant_id = Admin::user()->id; |
|
|
|
$form->type = 1; |
|
|
|
})->deleting(function (Form $form) { |
|
|
|
//不允许删除非自己的数据
|
|
|
|
if (array_filter($form->model()->toArray(), fn($v) => $v['supplier_id'] != Admin::user()->id)) { |
|
|
|
if (array_filter($form->model()->toArray(), fn($v) => $v['merchant_id'] != Admin::user()->id)) { |
|
|
|
return $form->response()->error('数据不存在'); |
|
|
|
} |
|
|
|
}); |
|
|
|
|