Browse Source

不允许查看非自己的数据优化

develop
李可松 4 years ago
parent
commit
df86e91e2c
  1. 9
      app/AdminSupplier/Controllers/OrderController.php

9
app/AdminSupplier/Controllers/OrderController.php

@ -6,6 +6,7 @@ use App\AdminSupplier\Repositories\Order;
use App\Common\OrderStatus;
use App\Common\PayType;
use App\Models\Agent;
use App\Models\OrderProductItem;
use App\Models\Supplier;
use Dcat\Admin\Admin;
use Dcat\Admin\Form;
@ -95,10 +96,10 @@ class OrderController extends AdminController
$show->disableQuickEdit();
$show->disableEditButton();
//不允许查看非自己的数据 TODO 待筛选
$show->model()->whereHas('orderProductItem', function ($query) {
return $query->where('supplier_id', Admin::user()->id);
});
//不允许查看非自己的数据,$show->model()->whereHas()不起作用?
if (!OrderProductItem::where(['order_id' => $show->model()->id, 'supplier_id' => Admin::user()->id])->exists()) {
Admin::exit('数据不存在');
}
$show->field('id');
$show->field('agent.name');

Loading…
Cancel
Save