diff --git a/FlyCube/MpApi/Controller/PlaneController.class.php b/FlyCube/MpApi/Controller/PlaneController.class.php index b12d836..e532fc9 100644 --- a/FlyCube/MpApi/Controller/PlaneController.class.php +++ b/FlyCube/MpApi/Controller/PlaneController.class.php @@ -149,15 +149,14 @@ class PlaneController extends PublicController */ public function getAirList() { - $this->isPower(); //总管理员 可接收任何shop_id 非总管理员 只可以调用自身shop_id 否则会中断 - + // 权限判断 + if (!$this->isPower()) { + $where['a.shop_id'] = $this->tokenShop_id; + } $airDb = D('airplane_register'); // 飞机表 $prefix = C('DB_PREFIX'); // 获取表前缀 - $where = []; - - $where['a.shop_id'] = $_REQUEST['shop_id']; $where['a.del'] = '0'; // 需要的字段,带表别名