没有权限

app-ghs/controllers/ClearController.php

@@ -92,7 +92,11 @@ class ClearController extends BaseController
     public function actionGetCustomFullInfo()
     {
         $id = Yii::$app->request->get('id', '');
-        $respond = ClearClass::getSaleInfo($id);
+        $info = ClearClass::getById($id);
+        if (isset($info['ghsShopId']) == false || $info['ghsShopId'] != $this->shopId) {
+            util::fail('没有权限');
+        }
+        $respond = ClearClass::getSaleInfo($info);
         util::success($respond);
     }
 

biz-ghs/clear/classes/ClearClass.php

@@ -243,12 +243,8 @@ class ClearClass extends BaseClass
     }
 
     //完整信息 ssh 20210625
-    public static function getSaleInfo($id)
+    public static function getSaleInfo($info)
     {
-        $info = self::getById($id);
-        if (empty($info)) {
-            return $info;
-        }
         $saleIds = $info['saleIds'] ?? [];
         $saleArr = explode(',', $saleIds);
         $saleList = OrderClass::getAllByCondition(['id' => ['in', $saleArr]], null, '*', null);