修复管理员越权看到其它类型企业

app/common/api/EnterpriseApi.php

@@ -24,8 +24,8 @@ class EnterpriseApi {
         $company_info = CompanyApi::getOne($companyId);
         $where = [];
         $whereRaw = "";
+        $where[] = ['type', '=', session('user')['type']];
         if ($company_info['code'] != 'super' && !self::chkUserInSuperusers()) {
-            $where[] = ['type', '=', session('user')['type']];
             if (session('user')['type'] == 1) {
                 $whr[] = ["companyId", "=", $companyId];
                 $whr[] = ["delete", "=", 0];
@@ -198,8 +198,8 @@ class EnterpriseApi {
         $company_info = CompanyApi::getOne($companyId);
         $where = [];
         $whereRaw = "";
+        $where[] = ['type', '=', session('user')['type']];
         if ($company_info['code'] != 'super' && !self::chkUserInSuperusers()) {
-            $where[] = ['type', '=', session('user')['type']];
             if (session('user')['type'] == 1) {
                 $whr[] = ["companyId", "=", $companyId];
                 $whr[] = ["delete", "=", 0];
@@ -343,8 +343,8 @@ class EnterpriseApi {
         $company_info = CompanyApi::getOne($companyId);
         $where = [];
         $whereRaw = "";
+        $where[] = ['type', '=', session('user')['type']];
         if ($company_info['code'] != 'super' && !self::chkUserInSuperusers()) {
-            $where[] = ['type', '=', session('user')['type']];
             if (session('user')['type'] == 1) {
                 $whr[] = ["companyId", "=", $companyId];
                 $whr[] = ["delete", "=", 0];