diff --git a/application/admin/controller/PaymentOrder.php b/application/admin/controller/PaymentOrder.php index cc9074c..44facd4 100755 --- a/application/admin/controller/PaymentOrder.php +++ b/application/admin/controller/PaymentOrder.php @@ -75,10 +75,12 @@ class PaymentOrder extends Backend $groupIds = $this->auth->getGroupIds(); $authGroup = new AuthGroup(); $cnt = $authGroup->where(["id" => ["in",$groupIds], "finance_flag" => 1])->count("*"); - if ($cnt==0) { + $params=$this->request->post(); + $model = new \app\admin\model\PaymentOrder(); + $info = $model->where(["id"=>$params['id']])->find(); + if ($cnt==0 && ($info['status']==2 || $params['status']==2)) { return json(Util::returnArrEr("未获取财务部门权限")); } - $params=$this->request->post(); $service = new PaymentOrderService(); $result = $service->setStatus($params['id'],$params['status']); return json($result); diff --git a/application/admin/controller/ReceiptOrder.php b/application/admin/controller/ReceiptOrder.php index 9ef2c45..d4f9693 100755 --- a/application/admin/controller/ReceiptOrder.php +++ b/application/admin/controller/ReceiptOrder.php @@ -79,7 +79,10 @@ class ReceiptOrder extends Backend $groupIds = $this->auth->getGroupIds(); $authGroup = new AuthGroup(); $cnt = $authGroup->where(["id" => ["in",$groupIds], "finance_flag" => 1])->count("*"); - if ($cnt==0) { + $params=$this->request->post(); + $model = new \app\admin\model\ReceiptOrder(); + $info = $model->where(["id"=>$params['id']])->find(); + if ($cnt==0 && ($info['status']==2 || $params['status']==2)) { return json(Util::returnArrEr("未获取财务部门权限")); } $params=$this->request->post();