|
@@ -25,6 +25,13 @@ class ReplyOrder extends API {
|
|
|
...BaseStdResponse.ACCESS_DENIED
|
|
...BaseStdResponse.ACCESS_DENIED
|
|
|
})
|
|
})
|
|
|
|
|
|
|
|
|
|
+ // 检查权限
|
|
|
|
|
+ let permission = await AccessControl.getPermission(uuid)
|
|
|
|
|
+ if (!permission.includes("admin") && !permission.includes("service"))
|
|
|
|
|
+ return res.json({
|
|
|
|
|
+ ...BaseStdResponse.PERMISSION_DENIED
|
|
|
|
|
+ })
|
|
|
|
|
+
|
|
|
const time = new Date().getTime()
|
|
const time = new Date().getTime()
|
|
|
|
|
|
|
|
let msg = []
|
|
let msg = []
|
|
@@ -47,7 +54,7 @@ class ReplyOrder extends API {
|
|
|
msg = selectRows[0].msg
|
|
msg = selectRows[0].msg
|
|
|
msg.push(message)
|
|
msg.push(message)
|
|
|
|
|
|
|
|
- let sql = 'UPDATE work_order SET msg = ?, update_time = ?, state = 0 WHERE id = ?'
|
|
|
|
|
|
|
+ let sql = 'UPDATE work_order SET msg = ?, update_time = ?, state = 1 WHERE id = ?'
|
|
|
let r = await db.query(sql, [msg, time, id])
|
|
let r = await db.query(sql, [msg, time, id])
|
|
|
|
|
|
|
|
try {
|
|
try {
|
|
@@ -57,8 +64,8 @@ class ReplyOrder extends API {
|
|
|
data: r.insertId
|
|
data: r.insertId
|
|
|
})
|
|
})
|
|
|
|
|
|
|
|
- if(selectRows[0].email) {
|
|
|
|
|
- await EmailTemplate.orderNewReply(selectRows[0].email, {id, content, files})
|
|
|
|
|
|
|
+ if (selectRows[0].email) {
|
|
|
|
|
+ await EmailTemplate.orderNewReply(selectRows[0].email, { id, content, files })
|
|
|
}
|
|
}
|
|
|
} else {
|
|
} else {
|
|
|
return res.json({ ...BaseStdResponse.ERR, msg: '回复工单失败!数据库错误' })
|
|
return res.json({ ...BaseStdResponse.ERR, msg: '回复工单失败!数据库错误' })
|