|
|
@@ -12,7 +12,7 @@ class AddAccount extends API {
|
|
|
}
|
|
|
|
|
|
async onRequest(req, res) {
|
|
|
- let { uuid, session, student_num, email, id, area, max_distance, min_distance, auto_time } = req.body
|
|
|
+ let { uuid, session, student_num, email, id, area, max_distance, min_distance, auto_time, notes } = req.body
|
|
|
|
|
|
if ([uuid, session, student_num, email, auto_time].some(value => value === '' || value === null || value === undefined))
|
|
|
return res.json({
|
|
|
@@ -25,13 +25,14 @@ class AddAccount extends API {
|
|
|
...BaseStdResponse.ACCESS_DENIED
|
|
|
})
|
|
|
|
|
|
+ let countSql = 'SELECT create_user FROM lepao_account WHERE student_num = ?'
|
|
|
+ let countRows = await db.query(countSql, [student_num])
|
|
|
+
|
|
|
+ if (!countRows)
|
|
|
+ return res.json({ ...BaseStdResponse.ERR, msg: '添加乐跑账号失败!数据库错误' })
|
|
|
+
|
|
|
// 判断是否重复注册
|
|
|
if (!id) {
|
|
|
- let countSql = 'SELECT create_user FROM lepao_account WHERE student_num = ?'
|
|
|
- let countRows = await db.query(countSql, [student_num])
|
|
|
-
|
|
|
- if (!countRows)
|
|
|
- return res.json({ ...BaseStdResponse.ERR, msg: '添加乐跑账号失败!数据库错误' })
|
|
|
if (countRows.length !== 0) {
|
|
|
if (countRows[0].create_user !== uuid)
|
|
|
return res.json({ ...BaseStdResponse.ERR, msg: '该乐跑账号已被其他用户绑定,请联系客服解绑' })
|
|
|
@@ -39,6 +40,14 @@ class AddAccount extends API {
|
|
|
}
|
|
|
}
|
|
|
|
|
|
+ if (countRows[0].create_user !== uuid) {
|
|
|
+ let permission = await AccessControl.getPermission(uuid)
|
|
|
+ if (!permission.includes("admin") && !permission.includes("service"))
|
|
|
+ return res.json({
|
|
|
+ ...BaseStdResponse.PERMISSION_DENIED
|
|
|
+ })
|
|
|
+ }
|
|
|
+
|
|
|
// 判断用户是否用了会员权益
|
|
|
// let userSql = 'SELECT vip FROM users WHERE uuid = ?'
|
|
|
// let userData = await db.query(userSql, [uuid])
|
|
|
@@ -67,11 +76,11 @@ class AddAccount extends API {
|
|
|
let sql, r
|
|
|
|
|
|
if (!id) {
|
|
|
- sql = 'INSERT INTO lepao_account (student_num, email, area, auto_time, create_user, create_time) VALUES (?, ?, ?, ?, ?, ?)'
|
|
|
- r = await db.query(sql, [student_num, email, area, auto_time, uuid, time])
|
|
|
+ sql = 'INSERT INTO lepao_account (student_num, email, area, auto_time, create_user, create_time, notes) VALUES (?, ?, ?, ?, ?, ?, ?)'
|
|
|
+ r = await db.query(sql, [student_num, email, area, auto_time, uuid, time, notes])
|
|
|
} else {
|
|
|
- sql = 'UPDATE lepao_account SET student_num = ?, email = ?, area = ?, auto_time = ?, update_time = ? WHERE id = ?'
|
|
|
- r = await db.query(sql, [student_num, email, area, auto_time, time, id])
|
|
|
+ sql = 'UPDATE lepao_account SET student_num = ?, email = ?, area = ?, auto_time = ?, update_time = ?, notes = ? WHERE id = ?'
|
|
|
+ r = await db.query(sql, [student_num, email, area, auto_time, time, notes, id])
|
|
|
}
|
|
|
|
|
|
try {
|