1

2025-09-28 14:03:06 +08:00
parent 209cd7e30d
commit 3702b709b7
4 changed files with 7 additions and 2 deletions
--- a/controllers/jx_order.go
+++ b/controllers/jx_order.go
@@ -538,6 +538,9 @@ func (c *OrderController) StaleIndexInfo() {
 		}

 		if permission.IsRoled(ctx) {
+			if (params.OperatorNumber != "" && params.OperatorNumber != mobile) || (params.BrandOperator != "" && params.BrandOperator != mobile) {
+				return nil, model.ErrCodeTokenIsInvalid, fmt.Errorf("非超级管理员账户,只能查看自己")
+			}
 			if storeList, err = cms.GetStoreList4User(ctx, mobile, userID); err == nil && len(storeList) > 0 {
 				for _, v := range storeList {
 					dataList = append(dataList, v.Store.ID)