|
@@ -9,5 +9,41 @@ class Core
|
|
|
{
|
|
|
$this->user = Dever::load('store/admin/auth.check');
|
|
|
$this->id = $this->user['store_id'];
|
|
|
+
|
|
|
+ $role = explode(',', $this->user['role_id']);
|
|
|
+ $uri = Dever::uri();
|
|
|
+
|
|
|
+ $this->user['msg_type'] = false;
|
|
|
+ if (!in_array(1, $role)) {
|
|
|
+ $this->user['msg_type'] = array(1,2,6,7);
|
|
|
+ if (!in_array(2, $role)) {
|
|
|
+ unset($this->user['msg_type'][1]);
|
|
|
+ if ($uri == 'order' || strstr($uri, 'admin/order') || strstr($uri, 'order_')) {
|
|
|
+ Dever::alert('您没有权限');
|
|
|
+ }
|
|
|
+ }
|
|
|
+ if (!in_array(4, $role)) {
|
|
|
+ unset($this->user['msg_type'][2]);
|
|
|
+ if (strstr($uri, 'stat')) {
|
|
|
+ Dever::alert('您没有权限');
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ if (!in_array(3, $role)) {
|
|
|
+ unset($this->user['msg_type'][3]);
|
|
|
+ if (strstr($uri, 'factory_order') || strstr($uri, 'goods') || strstr($uri, 'out')) {
|
|
|
+ Dever::alert('您没有权限');
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ if (strstr($uri, 'set')) {
|
|
|
+ Dever::alert('您没有权限');
|
|
|
+ }
|
|
|
+ if (strstr($uri, 'user')) {
|
|
|
+ Dever::alert('您没有权限');
|
|
|
+ }
|
|
|
+
|
|
|
+ $this->user['msg_type'] = implode(',', $this->user['msg_type']);
|
|
|
+ }
|
|
|
}
|
|
|
}
|