作者 lyh

gx

@@ -78,8 +78,8 @@ class HrLogic extends BaseLogic @@ -78,8 +78,8 @@ class HrLogic extends BaseLogic
78 if($this->manager['gid'] != ManageHr::GID_ZERO){ 78 if($this->manager['gid'] != ManageHr::GID_ZERO){
79 $groupModel = new Group(); 79 $groupModel = new Group();
80 $groupInfo = $groupModel->read(['id'=>$this->manager['gid']]); 80 $groupInfo = $groupModel->read(['id'=>$this->manager['gid']]);
81 - if (!in_array(20,$groupInfo['rights'])) {  
82 - $this->param['id'] = $this->manager['id']; 81 + if (!in_array(20,$groupInfo['rights']) && ($id != $this->manager['id'])) {
  82 + $this->fail('无权限查看其他用户信息');
83 } 83 }
84 } 84 }
85 $data = $this->model->read(['id'=>$id]); 85 $data = $this->model->read(['id'=>$id]);