判断

app-ghs/controllers/ClearController.php

@@ -65,7 +65,11 @@ class ClearController extends BaseController
     public function actionGetFullInfo()
     {
         $id = Yii::$app->request->get('id', '');
-        $respond = ClearClass::getGhsCgInfo($id);
+        $info = clearClass::getById($id);
+        if (isset($info['customShopId']) == false || $info['customShopId'] != $this->shopId) {
+            util::fail('没有权限');
+        }
+        $respond = ClearClass::getGhsCgInfo($info);
         util::success($respond);
     }
 

biz-ghs/clear/classes/ClearClass.php

@@ -196,12 +196,8 @@ class ClearClass extends BaseClass
     }
 
     //供应商的采购信息 ssh 20210625
-    public static function getGhsCgInfo($id)
+    public static function getGhsCgInfo($info)
     {
-        $info = self::getById($id);
-        if (empty($info)) {
-            return $info;
-        }
         $purchaseIds = $info['purchaseIds'] ?? [];
         $cgArr = explode(',', $purchaseIds);
         $cgList = CgClass::getAllByCondition(['id' => ['in', $cgArr]], null, 'id,orderSn,bigNum,smallNum,realPrice,addTime', null);