From: fomichev <vladimir.fomichev@erp-flowers.ru>
Date: Fri, 8 Nov 2024 10:35:57 +0000 (+0300)
Subject: Исправление ошибки логики
X-Git-Tag: 1.6~5^2~4
X-Git-Url: https://gitweb.erp-flowers.ru/?a=commitdiff_plain;h=31bdba62f0545c01c36e77f54285e5f49c6a4859;p=erp24_rep%2Fyii-erp24%2F.git

Исправление ошибки логики
---

diff --git a/erp24/controllers/crud/EmployeePaymentController.php b/erp24/controllers/crud/EmployeePaymentController.php
index 7876fd71..475217c6 100755
--- a/erp24/controllers/crud/EmployeePaymentController.php
+++ b/erp24/controllers/crud/EmployeePaymentController.php
@@ -31,8 +31,8 @@ class EmployeePaymentController extends Controller
                     'rules' => [
                         [
                             'allow' => true,
-                            'actions' => ['view', 'index', 'update', 'delete'],
-                            'roles' => ['menu/crud/employee-payment/','employee-paymentEdit'],
+                            'actions' => ['create', 'view', 'index', 'update', 'delete'],
+                            'roles' => ['menu/crud/employee-payment/', 'employee-paymentEdit'],
                         ],
                     ],
                     'denyCallback' => function ($rule, $action) {
@@ -156,7 +156,7 @@ class EmployeePaymentController extends Controller
         $admin = Yii::$app->user->identity;
 
         // Проверка на group_id и дату записи
-        if (!in_array($admin->group_id , [81, 20]) || !$admin->hasPermission('employee-paymentEdit') && date('Y-m') !== date('Y-m', strtotime($model->date))) {
+        if ((!in_array($admin->group_id , [81, 20]) || !$admin->hasPermission('employee-paymentEdit')) && date('Y-m') !== date('Y-m', strtotime($model->date))) {
             throw new \yii\web\ForbiddenHttpException('Редактирование разрешено только для записей текущего месяца.');
         }