[智价云] 员工操作状态校验补充

app/Http/Controllers/Manager/Personnel/Employee.php

@@ -312,6 +312,8 @@ class Employee extends Controller
         // 接收数据
         $id                = request('id', 0);
         $status            = request('status', 0);
+        $admin_id   = request('access_token.uid', 0); //用户ID
+        $is_admin   = request('access_token.is_admin', 0);//是否管理员操作 0=是1=否
         // 查询用户
         $where = ['id' => $id];
         // 执行修改
@@ -319,14 +321,15 @@ class Employee extends Controller
         if (!$Employee) {
             return json_send(['code' => 'error', 'msg' => '记录不存在']);
         }
+        if($is_admin == 1 && $admin_id == $Employee->uid){
+            return json_send(['code' => 'error', 'msg' => '不能修改自己的状态']);
+        }
         $Employee->status = $status;
         $Employee->update_time = time();
         $result = $Employee->save();
         // 提示新增失败
         if (!$result)    return json_send(['code' => 'error', 'msg' => '设置失败']);
         // 记录行为
-        $admin_id   = request('access_token.uid', 0); //用户ID
-        $is_admin   = request('access_token.is_admin', 0); //是否管理员操作 0=是1=否
         $table_name = $EmployeeModel->getTable();
         $notes_type = 2; //操作类型，1添加，2修改，3=删除
         $this->addAdminHistory('人员信息管理-员工管理', $admin_id, $is_admin, $table_name, $notes_type, [], ['status' => $status], '修改了员工' . $Employee->name . '状态');