Browse Source

修改 不允许删除非自己数据 的判断

dev
李可松 4 years ago
parent
commit
b5e9554bda
  1. 2
      app/Admin/Controllers/OrderController.php
  2. 2
      app/AdminAgent/Controllers/AgentProductController.php
  3. 2
      app/AdminAgent/Controllers/CategoryController.php
  4. 2
      app/AdminAgent/Controllers/MessageController.php
  5. 2
      app/AdminAgent/Controllers/NoticeController.php
  6. 2
      app/AdminAgent/Controllers/OrderController.php
  7. 2
      app/AdminAgent/Controllers/SlideController.php
  8. 2
      app/AdminAgent/Controllers/SpecialController.php
  9. 2
      app/AdminAgent/Controllers/UserController.php
  10. 2
      app/AdminAgent/Controllers/WaterfallAdController.php
  11. 4
      app/AdminSupplier/Controllers/AgentController.php
  12. 6
      app/AdminSupplier/Controllers/ProductController.php

2
app/Admin/Controllers/OrderController.php

@ -126,7 +126,7 @@ class OrderController extends AdminController
})->saving(function (Form $form) {
return $form->response()->error('操作禁止');
})->deleting(function (Form $form) {
return $form->response()->error('禁止删除');
return $form->response()->error('操作禁止');
});
}
}

2
app/AdminAgent/Controllers/AgentProductController.php

@ -298,7 +298,7 @@ class AgentProductController extends AdminController
}
})->deleting(function (Form $form) {
//不允许删除非自己的数据
if ($form->model()[0]['agent_id'] != Admin::user()->id) {
if (array_filter($form->model()->toArray(), fn($v) => $v['agent_id'] != Admin::user()->id)) {
return $form->response()->error('数据不存在');
}
});

2
app/AdminAgent/Controllers/CategoryController.php

@ -104,7 +104,7 @@ class CategoryController extends AdminController
$form->sort = $form->sort ?? 255;
})->deleting(function (Form $form) {
//不允许修改非自己的数据
if ($form->model()[0]['agent_id'] != Admin::user()->id) {
if (array_filter($form->model()->toArray(), fn($v) => $v['agent_id'] != Admin::user()->id)) {
return $form->response()->error('数据不存在');
}

2
app/AdminAgent/Controllers/MessageController.php

@ -119,7 +119,7 @@ class MessageController extends AdminController
$form->ignore(['id', 'status', 'created_at', 'updated_at', 'deleted_at']);
})->deleting(function (Form $form) {
//不允许删除非自己的数据
if ($form->model()[0]['agent_id'] != Admin::user()->id) {
if (array_filter($form->model()->toArray(), fn($v) => $v['agent_id'] != Admin::user()->id)) {
return $form->response()->error('数据不存在');
}
});

2
app/AdminAgent/Controllers/NoticeController.php

@ -93,7 +93,7 @@ class NoticeController extends AdminController
$form->ignore(['id', 'created_at', 'updated_at']);
})->deleting(function (Form $form) {
//不允许删除非自己的数据
if ($form->model()[0]['agent_id'] != Admin::user()->id) {
if (array_filter($form->model()->toArray(), fn($v) => $v['agent_id'] != Admin::user()->id)) {
return $form->response()->error('数据不存在');
}
});

2
app/AdminAgent/Controllers/OrderController.php

@ -184,7 +184,7 @@ class OrderController extends AdminController
return $form->response()->error('请通过订单列表的”通过“和”拒绝“按钮来审核退款');
}
})->deleting(function (Form $form) {
return $form->response()->error('禁止删除');
return $form->response()->error('操作禁止');
});
}
}

2
app/AdminAgent/Controllers/SlideController.php

@ -126,7 +126,7 @@ class SlideController extends AdminController
$form->ignore(['id', 'created_at', 'updated_at']);
})->deleting(function (Form $form) {
//不允许删除非自己的数据
if ($form->model()[0]['agent_id'] != Admin::user()->id) {
if (array_filter($form->model()->toArray(), fn($v) => $v['agent_id'] != Admin::user()->id)) {
return $form->response()->error('数据不存在');
}
});

2
app/AdminAgent/Controllers/SpecialController.php

@ -145,7 +145,7 @@ class SpecialController extends AdminController
$form->ignore(['id', 'agent_id', 'created_at', 'updated_at']);
})->deleting(function (Form $form) {
//不允许删除非自己的数据
if ($form->model()[0]['agent_id'] != Admin::user()->id) {
if (array_filter($form->model()->toArray(), fn($v) => $v['agent_id'] != Admin::user()->id)) {
return $form->response()->error('数据不存在');
}
});

2
app/AdminAgent/Controllers/UserController.php

@ -114,7 +114,7 @@ class UserController extends AdminController
//不允许编辑的字段
$form->ignore(['id', 'agent_id', 'nickname', 'deleted_at']);
})->deleting(function (Form $form) {
return $form->response()->error('禁止删除');
return $form->response()->error('操作禁止');
});
}
}

2
app/AdminAgent/Controllers/WaterfallAdController.php

@ -122,7 +122,7 @@ class WaterfallAdController extends AdminController
$form->ignore(['id', 'created_at', 'updated_at']);
})->deleting(function (Form $form) {
//不允许删除非自己的数据
if ($form->model()[0]['agent_id'] != Admin::user()->id) {
if (array_filter($form->model()->toArray(), fn($v) => $v['agent_id'] != Admin::user()->id)) {
return $form->response()->error('数据不存在');
}
});

4
app/AdminSupplier/Controllers/AgentController.php

@ -103,9 +103,9 @@ class AgentController extends AdminController
$form->display('id');
})->saving(function (Form $form) {
return $form->response()->error('禁止操作');
return $form->response()->error('操作禁止');
})->deleting(function (Form $form) {
return $form->response()->error('禁止删除');
return $form->response()->error('操作禁止');
});
}
}

6
app/AdminSupplier/Controllers/ProductController.php

@ -129,9 +129,9 @@ class ProductController extends AdminController
->update(['status' => ProductStatus::SOLD_OUT]);
}
})->deleting(function (Form $form) {
//这里获取字段值和saving不同
if ($form->model()[0]['supplier_id'] != Admin::user()->id) {
return $form->response()->error('删除失败');
//不允许删除非自己的数据
if (array_filter($form->model()->toArray(), fn($v) => $v['supplier_id'] != Admin::user()->id)) {
return $form->response()->error('数据不存在');
}
});
}

Loading…
Cancel
Save