Merge branch 'sprint/170_tianshujie_issue' into 'sprint/170'

* Fix the problem of judging product permissions.

See merge request easycorp/zentaopms!397
This commit is contained in:
李玉春
2021-11-11 02:56:41 +00:00
+13 -13
View File
@@ -145,21 +145,21 @@ class productModel extends model
*/
public function saveState($productID, $products)
{
if($productID == 0 and $this->cookie->preProductID) $productID = (int)$this->cookie->preProductID;
if($productID == 0) $productID = key($products);
if(!isset($products[$productID]))
if($productID > 0) $this->session->set('product', (int)$productID);
if($productID == 0 and $this->cookie->preProductID) $this->session->set('product', (int)$this->cookie->preProductID);
if($productID == 0 and $this->session->product == '') $this->session->set('product', key($products));
if(!isset($products[$this->session->product]))
{
$product = $this->getById($productID);
if(empty($product)) $productID = key($products);;
if($productID && strpos(",{$this->app->user->view->products},", ",{$productID},") === false) $this->accessDenied();
}
$this->session->set('product', $productID);
setcookie('preProductID', $productID, $this->config->cookieLife, $this->config->webRoot, '', $this->config->cookieSecure, true);
if($this->cookie->preProductID != $productID)
{
$this->cookie->set('preBranch', 0);
setcookie('preBranch', 0, $this->config->cookieLife, $this->config->webRoot, '', $this->config->cookieSecure, true);
}
if(empty($product)) $this->session->set('product', key($products));
if($productID && strpos(",{$this->app->user->view->products},", ",{$this->session->product},") === false) $this->accessDenied();
setcookie('preProductID', $productID, $this->config->cookieLife, $this->config->webRoot, '', $this->config->cookieSecure, true);
if($this->cookie->preProductID != $this->session->product)
{
$this->cookie->set('preBranch', 0);
setcookie('preBranch', 0, $this->config->cookieLife, $this->config->webRoot, '', $this->config->cookieSecure, true);
}
return $this->session->product;
}