|
@@ -881,7 +881,7 @@ class Transfer extends Start_Controller {
|
|
|
}
|
|
}
|
|
|
$sc_flag = 0; //生产中按钮的标识符号 为1的是可以查看 0 不可以
|
|
$sc_flag = 0; //生产中按钮的标识符号 为1的是可以查看 0 不可以
|
|
|
//只有admin和toutao用户可以查看
|
|
//只有admin和toutao用户可以查看
|
|
|
- if(in_array($user['id'],[10,50])){
|
|
|
|
|
|
|
+ if(in_array($user['id'],[10,44,50])){
|
|
|
$sc_flag = 1;
|
|
$sc_flag = 1;
|
|
|
}
|
|
}
|
|
|
$this->data['sc_flag'] = $sc_flag;
|
|
$this->data['sc_flag'] = $sc_flag;
|
|
@@ -2315,7 +2315,7 @@ class Transfer extends Start_Controller {
|
|
|
if(isset($_SESSION['api']))
|
|
if(isset($_SESSION['api']))
|
|
|
{
|
|
{
|
|
|
$user = $this->user->get_api($_SESSION['api']);
|
|
$user = $this->user->get_api($_SESSION['api']);
|
|
|
- if(!in_array($user['id'],[10,50])){
|
|
|
|
|
|
|
+ if(!in_array($user['id'],[10,44,50])){
|
|
|
exit('No direct script access allowed');
|
|
exit('No direct script access allowed');
|
|
|
}
|
|
}
|
|
|
}
|
|
}
|
