超管才能取消订单

app-ghs/controllers/OrderController.php

@@ -703,6 +703,11 @@ class OrderController extends BaseController
     //取消订单 shish 20210810
     public function actionCancel()
     {
+        $shopAdmin = $this->shopAdmin;
+        if (isset($shopAdmin->super) == false || $shopAdmin->super != 1) {
+            util::fail('超管才能取消订单');
+        }
+
         $id = Yii::$app->request->get('id', 0);
         $order = OrderClass::getLockById($id);
         OrderClass::valid($order, $this->shopId);