From aa100a5b9efc430568723f3263f97b1b0efa9507 Mon Sep 17 00:00:00 2001
From: gongfuxiang <fuxiang.gong@qq.com>
Date: Thu, 21 Apr 2022 18:55:21 +0800
Subject: [PATCH] =?UTF-8?q?=E7=94=A8=E6=88=B7=E5=92=8C=E9=A1=B5=E9=9D=A2?=
 =?UTF-8?q?=E8=AE=BE=E8=AE=A1=E5=AF=BC=E5=87=BA=E6=9D=83=E9=99=90=E5=A4=84?=
 =?UTF-8?q?=E7=90=86?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 app/admin/controller/Design.php | 7 +++++++
 app/admin/controller/User.php   | 6 ++++++
 2 files changed, 13 insertions(+)

diff --git a/app/admin/controller/Design.php b/app/admin/controller/Design.php
index ce80a6fc6..82416d329 100644
--- a/app/admin/controller/Design.php
+++ b/app/admin/controller/Design.php
@@ -177,6 +177,13 @@ class Design extends Common
      */
     public function Download()
     {
+        // 是否有权限
+        if(!AdminIsPower())
+        {
+            return $this->error('无权限');
+        }
+
+        // 下载数据
         $ret = DesignService::DesignDownload($this->data_request);
         if(isset($ret['code']) && $ret['code'] != 0)
         {
diff --git a/app/admin/controller/User.php b/app/admin/controller/User.php
index 04272812f..442e4c446 100755
--- a/app/admin/controller/User.php
+++ b/app/admin/controller/User.php
@@ -120,6 +120,12 @@ class User extends Common
 	 */
 	public function ExcelExport()
 	{
+		// 是否有权限
+        if(!AdminIsPower())
+        {
+            return $this->error('无权限');
+        }
+
         // 获取数据列表
 		$data_params = [
 			'where'		=> $this->form_where,