query($userInfoQuery); if ($userResult && $userRow = $userResult->fetch_assoc()) { // 只有 em_permission_role_id=2 表示该用户是组长 $isLeader = ($userRow['em_permission_role_id'] == 2); } // 如果不是组长,直接跳转到客户列表页面 if (!$isLeader) { header('Location: customers.php'); exit; } // 获取URL参数 $tagName = $_GET['tagName'] ?? ''; $employeeId = $_GET['employeeId'] ?? $_SESSION['employee_id']; if (empty($employeeId) || !is_numeric($employeeId)) { $employeeId = $_SESSION['employee_id']; } // 如果不是组长,只能查看自己的数据 if (!$isLeader) { $employeeId = $_SESSION['employee_id']; } else if ($employeeId != $_SESSION['employee_id']) { // 如果是组长查看组员数据,确认该员工确实是自己的组员 $checkSubordinate = "SELECT id FROM employee WHERE id = $employeeId AND em_role = " . $_SESSION['employee_id']; $checkResult = $conn->query($checkSubordinate); if (!$checkResult || $checkResult->num_rows == 0) { // 不是自己的组员,只能查看自己的数据 $employeeId = $_SESSION['employee_id']; } } if (empty($tagName)) { header('Location: customers.php'); exit; } ?>
查看员工: query($empQuery); if ($empResult && $empRow = $empResult->fetch_assoc()) { echo htmlspecialcharsFix($empRow['em_user']); } else { echo "未知"; } ?>