后台-撤回订单-添加权限,检测管理员id,增加管理员操作记录(待测试)

app/controller/admin/order/Order.php

@@ -341,9 +341,13 @@ class Order extends BaseController
         $group_order_id = request()->param('group_order_id');
         $order_id = request()->param('order_id');
         $uid = request()->param('uid');
+        $adminId = request()->param('adminId');
         if (empty($order_id) || empty($group_order_id) || empty($uid)) {
             return app('json')->fail('参数缺失');
         }
+        if (!in_array($adminId, [1,28,29])) {//超级管理员,财务,老总
+            return app('json')->fail('后台权限不足');
+        }
         try {
             Db::startTrans();
             //查找是否有推荐人
@@ -455,6 +459,12 @@ class Order extends BaseController
             Db::rollback();
             return app('json')->fail('操作失败'. $e->getMessage());
         }
+        Db::name("user_order_kill_records")->insert([//记录哪位管理员撤销的订单
+            'operation_id' => $adminId,
+            'uid' => $uid,
+            'order_id' => $order_id,
+            'mark' => '后台管理员撤销订单记录'
+        ]);
         return app('json')->success('操作成功');
     }
 
@@ -484,9 +494,13 @@ class Order extends BaseController
     public function easterKillOrder(){   //恢复订单
         $group_order_id = request()->param('group_order_id');
         $order_id = request()->param('order_id');
+        $adminId = request()->param('adminId');
         if (empty($order_id) || empty($group_order_id)) {
             return app('json')->fail('参数缺失');
         }
+        if (!in_array($adminId, [1,28,29])) {//超级管理员,财务,老总
+            return app('json')->fail('后台权限不足');
+        }
         try {
             Db::startTrans();
             // 恢复订单相关表
@@ -511,6 +525,11 @@ class Order extends BaseController
             Db::rollback();
             return app('json')->fail('撤回失败: '.$e->getMessage());
         }
+        Db::name("user_order_recover_records")->insert([//记录哪位管理员恢复的订单
+            'operation_id' => $adminId,
+            'order_id' => $order_id,
+            'mark' => '后台管理员恢复订单记录'
+        ]);
         return app('json')->success('撤回成功');
     }
     private function easterOrder($table, array $where)  //恢复表数据