|
@@ -125,7 +125,7 @@ module.exports = app => {
|
|
|
async _checkCanEntry(ctx) {
|
|
|
ctx.advance.filePermission = false;
|
|
|
if (ctx.advance.status === auditConst.status.uncheck) {
|
|
|
- if (ctx.session.sessionUser.accountId !== ctx.advance.uid && !ctx.tender.isTourist) {
|
|
|
+ if (ctx.session.sessionUser.accountId !== ctx.advance.uid && !ctx.tender.isTourist && !ctx.session.sessionUser.is_admin) {
|
|
|
throw '无权访问';
|
|
|
} else if (ctx.session.sessionUser.accountId === ctx.advance.uid || ctx.tender.touristPermission.file) {
|
|
|
ctx.advance.filePermission = true;
|
|
@@ -133,7 +133,7 @@ module.exports = app => {
|
|
|
} else {
|
|
|
const auditors = await ctx.service.advanceAudit.getAuditorsWithOwner(ctx.advance.id, ctx.advance.times);
|
|
|
const cur_uid = ctx.session.sessionUser.accountId;
|
|
|
- if (auditors.findIndex(item => item.audit_id === cur_uid) === -1 && !ctx.tender.isTourist) {
|
|
|
+ if (auditors.findIndex(item => item.audit_id === cur_uid) === -1 && !ctx.tender.isTourist && !ctx.session.sessionUser.is_admin) {
|
|
|
throw '无权访问';
|
|
|
} else if (auditors.findIndex(item => item.audit_id === cur_uid) !== -1 || ctx.session.sessionUser.accountId === ctx.advance.uid || ctx.tender.touristPermission.file) {
|
|
|
ctx.advance.filePermission = true;
|