fix: 加 权限 校验

ic-deliver/app/base/controller/impl/bizchance/bizoptCtl.js

@@ -44,10 +44,10 @@ class BizOptCtl extends CtlBase {
         robj.business_info_phone = system.decryptStr(element.business_info.contactsPhone);//联系电话
         robj.v_cophone = system.decryptStr(element.v_cophone);//联系电话-shousuo
         robj.business_status = element.business_status;//商机当前状态
-        if (element.business_info.serviceName && element.business_info.serviceName != 'undefined'){
+        if (element.business_info.serviceName && element.business_info.serviceName != 'undefined') {
           robj.serviceName = element.business_info.serviceName;//服务地区
         }
-       else{
+        else {
           robj.serviceName = "";
         }
         robj.updated_at = this.timeFormat(element.updated_at);//商机当前状态日期
@@ -57,8 +57,8 @@ class BizOptCtl extends CtlBase {
         robj.sourceName = element.source_name;//渠道来源
         robj.source_name = element.source_name;//渠道来源--前端服务
 
-        robj.salesman_name=element.salesman_name;
-        robj.salesman_phone=system.decryptStr(element.salesman_phone);
+        robj.salesman_name = element.salesman_name;
+        robj.salesman_phone = system.decryptStr(element.salesman_phone);
 
         rarr.push(robj);
       });
@@ -129,17 +129,24 @@ class BizOptCtl extends CtlBase {
   }
 
   /*更新业务员信息*/
-  async updateSalesmanInfoByDemandCode(mobj, qobj, req){
+  async updateSalesmanInfoByDemandCode(mobj, qobj, req) {
     var pobj = mobj.d;
-    if (pobj.businessMode && pobj.businessMode != 'undefined'){
-      try{
+    if (pobj.businessMode && pobj.businessMode != 'undefined') {
+      const data = await this.service.findOne({
+        demand_code: pobj.businessMode,
+        facilitator_id: mobj.company_id
+      });
+      if (!data) {
+        return system.getResultError("没有权限");
+      }
+      try {
         var res = await this.service.findInfoByDemandCode(pobj);
-        if (res){
+        if (res) {
           var sInfo = {
             "flowType": "BIZ",
             "flowId": res.id,
-            "flowCode":pobj.businessMode,
-            "salesmanInfo":{
+            "flowCode": pobj.businessMode,
+            "salesmanInfo": {
               "oldOpcode": res.salesman_opcode,
               "oldClerkName": res.salesman_name,
               "oldClerkId": res.salesman_id,
@@ -158,16 +165,16 @@ class BizOptCtl extends CtlBase {
           await this.service.updateSalesmanInfoByDemandCode(pobj);//更新业务员信息
           return system.getResult("操作成功！");
         }
-        else{
+        else {
           return system.getResultError("未找到相关数据");
         }
 
       }
-      catch(error){
+      catch (error) {
         return system.getResultError(error);
       }
     }
-    else{
+    else {
       return system.getResultError("参数错误!");
     }
   }