没有权限

application/api_broker/controller/Location.php

@@ -108,11 +108,11 @@ class Location extends Basic
                 $m_agent = new AAgents();
                 $agent_where['name'] = ['like', '%'.$params['agent_name'].'%'];
                 $agent_where['status'] = 0;
-                $agent_id = $m_agent->getFieldOneValue('id', $agent_where);
+                $agent_id = $m_agent->getAgentInfo('id,store_id,district_id', 0, $agent_where);
                 if (empty($agent_id)) {
                     return $this->response(101, '没有该经纪人');
                 }
-                $where['agent_id'] = $agent_id;
+                $where['agent_id'] = $agent_id['id'];
                 $agent_data = $s_redis->getRedisCache(2, $this->agentId);
                 $is_ = $s_redis->checkRule($this->agentId, 'location_all');  //全公司的
                 if ($is_) {
@@ -123,9 +123,15 @@ class Location extends Basic
 //                            $where['agent_id'] = $this->agentId;  //默认查询自己
                             return $this->response(101, '没有权限');
                         } else {
+                            if ($agent_id['store_id'] != $agent_data['store_id']) {
+                                return $this->response(101, '没有权限');
+                            }
                             $where['store_id'] = $agent_data['store_id']; //本门店
                         }
                     } else {
+                        if ($agent_id['district_id'] != $agent_data['district_id']) {
+                            return $this->response(101, '没有权限');
+                        }
                         $where['district_id'] = $agent_data['district_id']; //本部门
                     }
                 }