diff --git a/application/adminapi/controller/Admin.php b/application/adminapi/controller/Admin.php index 9e25dfd..73c43d1 100644 --- a/application/adminapi/controller/Admin.php +++ b/application/adminapi/controller/Admin.php @@ -196,10 +196,9 @@ class Admin extends adminApi return V(0,"失败", []); } - // 先移除所有权限 - model('admin/AuthGroupAccess')->where('uid', $params['id'])->delete(); - if(!empty($group)){ + // 先移除所有权限 + model('admin/AuthGroupAccess')->where('uid', $params['id'])->delete(); // 过滤不允许的组别,避免越权 $group = array_intersect($this->childrenGroupIds, $group); if (!$group) {