Исправление ошибки логики

diff --git a/erp24/controllers/crud/EmployeePaymentController.php b/erp24/controllers/crud/EmployeePaymentController.php
index 7876fd7179537743796de01e718a9a2d075b08f1..475217c6273c4ba4fdf78fbf35b523fb2e3a1041 100755 (executable)
--- a/erp24/controllers/crud/EmployeePaymentController.php
+++ b/erp24/controllers/crud/EmployeePaymentController.php
@@ -31,8 +31,8 @@ class EmployeePaymentController extends Controller
                     'rules' => [
                         [
                             'allow' => true,
-                            'actions' => ['view', 'index', 'update', 'delete'],
-                            'roles' => ['menu/crud/employee-payment/','employee-paymentEdit'],
+                            'actions' => ['create', 'view', 'index', 'update', 'delete'],
+                            'roles' => ['menu/crud/employee-payment/', 'employee-paymentEdit'],
                         ],
                     ],
                     'denyCallback' => function ($rule, $action) {
@@ -156,7 +156,7 @@ class EmployeePaymentController extends Controller
         $admin = Yii::$app->user->identity;
 
         // Проверка на group_id и дату записи
-        if (!in_array($admin->group_id , [81, 20]) || !$admin->hasPermission('employee-paymentEdit') && date('Y-m') !== date('Y-m', strtotime($model->date))) {
+        if ((!in_array($admin->group_id , [81, 20]) || !$admin->hasPermission('employee-paymentEdit')) && date('Y-m') !== date('Y-m', strtotime($model->date))) {
             throw new \yii\web\ForbiddenHttpException('Редактирование разрешено только для записей текущего месяца.');
         }