授权修改

backend/components/v1/authorizationFilter.php

@@ -19,15 +19,17 @@ class authorizationFilter extends ActionFilter
         }
         if (isset(Yii::$app->user->identity->GUID)) {
             $userGuid = Yii::$app->user->identity->GUID;
-            $url = Yii::$app->request->pathInfo;
+            $url = $this->owner->module->requestedRoute;
             $shopRbacUser = ShopRbacUser::find()
             ->from('shop_rbac_user sru')
             ->select('sru.GUID')
             ->leftJoin('shop_rbac_role_user srru', 'srru.USER_ID = sru.GUID')
             ->leftJoin('shop_rbac_role_access srra', 'srra.ROLE_ID = srru.ROLE_ID')
             ->leftJoin('shop_rbac_node srn', 'srn.ID = srra.NODE_ID')
+            ->leftJoin('shop_rbac_role srr', 'srr.ID = srra.ROLE_ID')
             ->where(['srn.NAME' => $url])
             ->andWhere(['sru.GUID' => $userGuid])
+            ->andWhere(['srr.STATUS' => ADMIN_ACTIVE_STATUS])
             ->all();
             if (!empty($shopRbacUser)) {
                 return true;

backend/config/constants.php

 <?php
 // 常量
-defined('REDIS_PREFIX') or define('REDIS_PREFIX', 'ROMENS_NEW_');
-defined('DB_PREFIX') or define('DB_PREFIX', 'db-');
-defined('DEFAULT_DB_PREFIX') or define('DEFAULT_DB_PREFIX', 'db');
+defined('REDIS_PREFIX') or define('REDIS_PREFIX', 'ROMENS_NEW_');//redis的前缀
+defined('DB_PREFIX') or define('DB_PREFIX', 'db-');//db前缀
+defined('DEFAULT_DB_PREFIX') or define('DEFAULT_DB_PREFIX', 'db');//默认db
+defined('ADMIN_ACTIVE_STATUS') or define('ADMIN_ACTIVE_STATUS', '1');//管理员活动状态