From 58a0ecfd9bbf5f8c0330aa687b9b76884a47b4d2 Mon Sep 17 00:00:00 2001
From: nizongfeng <nizongfeng@gmail.com>
Date: Wed, 15 Feb 2023 15:43:37 +0800
Subject: [PATCH] =?UTF-8?q?=E4=BC=98=E5=8C=96?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 application/admin/controller/PaymentOrder.php | 6 ++++--
 application/admin/controller/ReceiptOrder.php | 5 ++++-
 2 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/application/admin/controller/PaymentOrder.php b/application/admin/controller/PaymentOrder.php
index cc9074c..44facd4 100755
--- a/application/admin/controller/PaymentOrder.php
+++ b/application/admin/controller/PaymentOrder.php
@@ -75,10 +75,12 @@ class PaymentOrder extends Backend
         $groupIds = $this->auth->getGroupIds();
         $authGroup = new AuthGroup();
         $cnt = $authGroup->where(["id" => ["in",$groupIds], "finance_flag" => 1])->count("*");
-        if ($cnt==0) {
+        $params=$this->request->post();
+        $model = new \app\admin\model\PaymentOrder();
+        $info = $model->where(["id"=>$params['id']])->find();
+        if ($cnt==0 && ($info['status']==2 || $params['status']==2)) {
             return json(Util::returnArrEr("未获取财务部门权限"));
         }
-        $params=$this->request->post();
         $service = new PaymentOrderService();
         $result = $service->setStatus($params['id'],$params['status']);
         return json($result);
diff --git a/application/admin/controller/ReceiptOrder.php b/application/admin/controller/ReceiptOrder.php
index 9ef2c45..d4f9693 100755
--- a/application/admin/controller/ReceiptOrder.php
+++ b/application/admin/controller/ReceiptOrder.php
@@ -79,7 +79,10 @@ class ReceiptOrder extends Backend
         $groupIds = $this->auth->getGroupIds();
         $authGroup = new AuthGroup();
         $cnt = $authGroup->where(["id" => ["in",$groupIds], "finance_flag" => 1])->count("*");
-        if ($cnt==0) {
+        $params=$this->request->post();
+        $model = new \app\admin\model\ReceiptOrder();
+        $info = $model->where(["id"=>$params['id']])->find();
+        if ($cnt==0 && ($info['status']==2 || $params['status']==2)) {
             return json(Util::returnArrEr("未获取财务部门权限"));
         }
         $params=$this->request->post();