售后优化

app-ghs/controllers/RefundController.php

@@ -20,6 +20,11 @@ class RefundController extends BaseController
     //审核通过 ssh 20230811
     public function actionPass()
     {
+        $shopAdmin = $this->shopAdmin;
+        if (isset($shopAdmin->super) == false || $shopAdmin->super != 1) {
+            util::fail('没有权限操作');
+        }
+
         $get = Yii::$app->request->get();
         $id = $get['id'] ?? 0;
         $refund = RefundOrderClass::getById($id, true);
@@ -41,6 +46,11 @@ class RefundController extends BaseController
     //驳回 ssh 20230813
     public function actionReject()
     {
+        $shopAdmin = $this->shopAdmin;
+        if (isset($shopAdmin->super) == false || $shopAdmin->super != 1) {
+            util::fail('没有权限操作');
+        }
+
         $post = Yii::$app->request->post();
         $id = $post['id'] ?? 0;
         $rejectReason = $post['rejectReason'] ?? '';