Prechádzať zdrojové kódy

曲线救国之期台账权限不足问题

laiguoran 4 rokov pred
rodič
commit
b61a2d0c22

+ 4 - 1
app/middleware/stage_check.js

@@ -60,7 +60,10 @@ module.exports = options => {
             });
             // 权限相关
             // todo 校验权限 (标段参与人、分享)
-            const accountId = this.session.sessionUser.accountId,
+            // 因为进度需要,暂时先处理所有accountId都为原报本人,才能获取到所有期数据,之后调整吧
+            const data = this.request.body.data ? JSON.parse(this.request.body.data) : null;
+            console.log(data);
+            const accountId = data && data.comefrom && data.comefrom === 'schedule' ? stage.user_id : this.session.sessionUser.accountId,
                 auditorIds = _.map(stage.auditors, 'aid'),
                 shareIds = [];
             stage.users = stage.status === status.uncheck ? [stage.user_id] : [stage.user_id, ...auditorIds];

+ 1 - 1
app/public/js/schedule_stage_gcl.js

@@ -366,7 +366,7 @@ $(function () {
 
     const huizongObj = {
         setSjs: function (order) {
-            postData('/tender/' + getTenderId() + '/measure/stage/' + order + '/load', { filter: 'ledger' }, function (data) {
+            postData('/tender/' + getTenderId() + '/measure/stage/' + order + '/load', { filter: 'ledger', comefrom: 'schedule' }, function (data) {
                 postData('/tender/' + getTenderId() + '/schedule/stage/' + order + '/load', {}, function (data2) {
                     const calcList = ['year_gather_tp',
                         'contract_tp', 'qc_qty', 'qc_tp', 'total_price', 'contract_tp', 'qc_tp', 'gather_tp',

+ 1 - 1
app/public/js/schedule_stage_tp.js

@@ -73,7 +73,7 @@ $(function () {
     SpreadJsObj.selChangedRefreshBackColor(ledgerSpread.getActiveSheet());
 
     if (curScheduleStage && curScheduleStage.order) {
-        postData('/tender/' + getTenderId() + '/measure/stage/' + curScheduleStage.order + '/load', { filter: 'ledger' }, function (data) {
+        postData('/tender/' + getTenderId() + '/measure/stage/' + curScheduleStage.order + '/load', { filter: 'ledger', comefrom: 'schedule' }, function (data) {
             const calcList = ['year_gather_tp',
                 'contract_tp', 'qc_qty', 'qc_tp', 'total_price', 'contract_tp', 'qc_tp', 'gather_tp',
                 'pre_contract_tp', 'pre_qc_tp', 'pre_gather_tp', 'end_contract_tp', 'end_qc_tp', 'end_gather_tp', 'end_correct_tp'];

+ 1 - 1
app/router.js

@@ -449,7 +449,7 @@ module.exports = app => {
     app.post('/tender/:id/schedule/stage/save', sessionAuth, tenderCheck, uncheckTenderCheck, 'scheduleController.saveStageTp');
     app.get('/tender/:id/schedule/stage/gcl', sessionAuth, tenderCheck, uncheckTenderCheck, 'scheduleController.stageGcl');
     app.post('/tender/:id/schedule/stage/gcl/save', sessionAuth, tenderCheck, uncheckTenderCheck, 'scheduleController.saveStageGcl');
-    app.post('/tender/:id/schedule/stage/:order/load', sessionAuth, tenderCheck, uncheckTenderCheck, stageCheck, 'scheduleController.loadTpLedgerData');
+    app.post('/tender/:id/schedule/stage/:order/load', sessionAuth, tenderCheck, uncheckTenderCheck, 'scheduleController.loadTpLedgerData');
 
     // 书签
     app.post('/tender/:id/ledger/tag', sessionAuth, tenderCheck, uncheckTenderCheck, 'tenderController.billsTag');