diff --git a/wms/schedule-index.php b/wms/schedule-index.php index 6125d9c8..f6d07a00 100644 --- a/wms/schedule-index.php +++ b/wms/schedule-index.php @@ -4,12 +4,16 @@ include "header.php"; $tourl = $_SERVER["SCRIPT_NAME"]."?function_name=schedule&token=".$token; // 工務總處可瀏覽全部資料 -$sql = "select department_id from account where accountid = '$user_id'"; +$sql = "select department_id, role_id from account where accountid = '$user_id'"; $res = mysqli_query($link, $sql); $row = mysqli_fetch_row($res); $user_department_id = $row[0]; +$user_role_id = $row[1]; mysqli_free_result($res); +// 各區工務助理專員可瀏覽全部 +$dr_arr = ['3114', '3133', '3144', '3152']; + if (!isset($_GET["p"]) || $_GET["p"] <= 0) $p = 1; else $p = $_GET["p"]; $page_each = 50; @@ -22,6 +26,7 @@ $page_close = 0; $sql_cmd2 = ""; $sql_cmd = sql_myself($user_id); if ($user_department_id == "501" || $user_department_id == "322" || $user_id == "M0012" || $user_id == "M0105") $sql_cmd = ""; +if (in_array($user_department_id.$user_role_id, $dr_arr)) $sql_cmd = ""; //if (empty($sql_cmd)) $sql_cmd = "where "; if (!empty($_GET["contractno"])) $sql_cmd2 .= "and contractno = '".$_GET["contractno"]."' "; if (!empty($_GET["facilityno"])) $sql_cmd2 .= "and facilityno = '".$_GET["facilityno"]."' ";