1

Myshipping.Application/Service/BookingOrder/BookingOrderService.cs

@@ -732,7 +732,15 @@ namespace Myshipping.Application
 
                 var mlist = await _rep.AsQueryable().Filter(null, true).Where(x => x.Id == input.Id).FirstAsync();
                 var rightlist= await _right.GetDataScopeList(MenuConst.MenuBookingOrder,true);
-                if (!(mlist.OPID == UserManager.UserId.ToString() || mlist.DOCID == UserManager.UserId.ToString() || mlist.CUSTSERVICEID == UserManager.UserId.ToString() || mlist.ROUTEID == UserManager.UserId.ToString() || mlist.CreatedUserId.ToString() == UserManager.UserId.ToString() || UserManager.DjyUserId == "d85fd590-d9f6-4410-93a1-f6fac77b606e"))
+                if (!(
+                    mlist.OPID == UserManager.UserId.ToString() || 
+                    mlist.DOCID == UserManager.UserId.ToString() ||
+                    mlist.CUSTSERVICEID == UserManager.UserId.ToString() ||
+                    mlist.ROUTEID == UserManager.UserId.ToString() ||
+                    mlist.CreatedUserId.ToString() == UserManager.UserId.ToString() ||
+                    UserManager.DjyUserId == "d85fd590-d9f6-4410-93a1-f6fac77b606e"||
+                    rightlist.Contains((long)mlist.CreatedUserId)
+                    ))
                 {
                     throw Oops.Bah("您没有当前单据的操作权限！");
                 }