From 65e42ed2c337e01e3cc48217d22e79e23c5db00c Mon Sep 17 00:00:00 2001
From: yubaolee <yubaolee@163.com>
Date: Fri, 23 Apr 2021 15:46:48 +0800
Subject: [PATCH] fix issue #I3M9L9

---
 OpenAuth.App/FlowInstance/FlowInstanceApp.cs | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/OpenAuth.App/FlowInstance/FlowInstanceApp.cs b/OpenAuth.App/FlowInstance/FlowInstanceApp.cs
index 4664e90c..ffc75d9e 100644
--- a/OpenAuth.App/FlowInstance/FlowInstanceApp.cs
+++ b/OpenAuth.App/FlowInstance/FlowInstanceApp.cs
@@ -154,6 +154,13 @@ namespace OpenAuth.App
         public bool NodeVerification(string instanceId, Tag tag)
         {
             FlowInstance flowInstance = Get(instanceId);
+            
+            var user = _auth.GetCurrentUser().User;
+            if (flowInstance.MakerList != "1" && !flowInstance.MakerList.Contains(user.Id))
+            {
+                throw new Exception("当前用户没有审批该节点权限");
+            }
+            
             FlowInstanceOperationHistory flowInstanceOperationHistory = new FlowInstanceOperationHistory
             {
                 InstanceId = instanceId,
@@ -290,8 +297,11 @@ namespace OpenAuth.App
         public bool NodeReject(VerificationReq reqest)
         {
             var user = _auth.GetCurrentUser().User;
-
             FlowInstance flowInstance = Get(reqest.FlowInstanceId);
+            if (flowInstance.MakerList != "1" && !flowInstance.MakerList.Contains(user.Id))
+            {
+                throw new Exception("当前用户没有驳回该节点权限");
+            }
 
             FlowRuntime wfruntime = new FlowRuntime(flowInstance);