1
{
2
    "require": {
3
        "php": ">=8.2",
4
        "ext-curl": "*",
5
        "ext-fileinfo": "*",
6
        "ext-openssl": "*",
7
        "ext-pdo": "*",
8
        "ext-zip": "*",
9
        "topthink/framework": "^8.1.2",          // ThinkPHP 8 核心框架
10
        "topthink/think-orm": "^4.0.5",           // ORM
11
        "topthink/think-filesystem": "^3.0",      // 文件系统
12
        "topthink/think-multi-app": "^1.0",       // ★ 多应用支持
13
        "topthink/think-view": "^2.0",            // 模板引擎
14
        "topthink/think-captcha": "^3.0",         // 验证码
15
        "topthink/think-helper": "^3.1",          // 助手函数
16
        "topthink/think-image": "^1.0.8",         // 图片处理
17
        "overtrue/pinyin": "^5.2",                // 拼音转换
18
        "phpmailer/phpmailer": "^6.8",            // 邮件发送
19
        "firebase/php-jwt": "^7.0",               // JWT认证
20
        "phpoffice/phpspreadsheet": "^1.2",        // Excel导入导出
21
        "phpoffice/phpword": "^1.2",              // Word生成
22
        "mpdf/mpdf": "^8.1",                      // PDF生成
23
        "alibabacloud/dysmsapi-20170525": "^4.3"  // 阿里云短信
24
    }
25
}

1
return [
2
    'app_host'         => env('app.host', ''),
3
    'app_namespace'    => '',
4
    'with_route'       => true,        // 启用路由
5
    'default_app'      => 'home',      // 默认应用
6
    'default_timezone' => 'Asia/Shanghai',
7

8
    'default_filter'   => 'htmlspecialchars',  // 全局XSS过滤
9

10
    'page_size'    => 20,               // 默认分页
11
    'file_size'    => 50,               // 附件大小50M
12
    'session_admin' => 'gougu_admin',   // Session键名
13

14
    'http_exception_template' => [
15
        401 => public_path() . 'tpl/401.html',
16
        403 => public_path() . 'tpl/403.html',
17
        404 => public_path() . 'tpl/404.html',
18
        405 => public_path() . 'tpl/405.html',  // 无权限
19
        500 => public_path() . 'tpl/500.html',
20
    ]
21
];

1
return [
2
    'default' => 'mysql',
3
    'auto_timestamp' => true,            // 自动写入时间戳
4
    'datetime_format' => 'Y-m-d H:i:s',
5
    'connections' => [
6
        'mysql' => [
7
            'type'     => 'mysql',
8
            'hostname' => '127.0.0.1',
9
            'database' => 'oa',
10
            'username' => 'root',
11
            'password' => '123456',
12
            'hostport' => '3306',
13
            'prefix'   => 'oa_',         // 表前缀 oa_
14
            'charset'  => 'utf8mb4',
15
            'fields_strict' => true,     // 严格检查字段
16
        ],
17
    ],
18
];

1
namespace app\base;
2

3
use think\facade\Cache;
4
use think\facade\Db;
5
use think\facade\Request;
6
use think\facade\Session;
7
use think\facade\View;
8
use systematic\Systematic;
9

10
abstract class BaseController
11
{
12
    protected $batchValidate = false;
13
    protected $pageSize = 20;
14
    protected $middleware = [];
15
    protected $module;
16
    protected $controller;
17
    protected $action;
18
    protected $uid;
19
    protected $did;      // 部门ID
20
    protected $pid;      // 岗位ID
21
    protected $model;
22

23
    public function __construct()
24
    {
25
        // 解析当前请求的 模块/控制器/方法
26
        $this->module = strtolower(app('http')->getName());
27
        $this->controller = strtolower(Request::controller());
28
        $this->action = strtolower(Request::action());
29
        $this->uid = 0;
30
        $this->did = 0;
31
        $this->pid = 0;
32
        $this->initialize();
33
    }
34

35
    protected function initialize()
36
    {
37
        $this->checkLogin();
38
        $this->pageSize = Request::param('limit',
39
            \think\facade\Config::get('app.page_size'));
40
    }
41

42
    // ... checkLogin 和 checkAuth 见下文
43
}

1
protected function checkLogin()
2
{
3
    // 1. 登录页和验证码页跳过检查
4
    if ($this->controller !== 'login' && $this->controller !== 'captcha') {
5
        $session_admin = get_config('app.session_admin');
6

7
        // 2. 未登录 → 重定向到登录页
8
        if (!Session::has($session_admin)) {
9
            if (request()->isAjax()) {
10
                return to_assign(404, '请先登录');
11
            } else {
12
                redirect('/home/login/index.html')->send();
13
                exit;
14
            }
15
        } else {
16
            // 3. 已登录 → 加载用户信息
17
            $this->uid = Session::get($session_admin);
18
            $login_admin = get_admin($this->uid);
19
            $this->did = $login_admin['did'];
20
            $this->pid = $login_admin['pid'];
21
            $is_lock = $login_admin['is_lock'];
22

23
            // 4. 10小时超时检查
24
            $last_login_time = Db::name('Admin')
25
                ->where(['id' => $this->uid])
26
                ->value('last_login_time');
27
            $timeDiff = time() - $last_login_time;
28
            if ($timeDiff > 36000) {  // 36000秒 = 10小时
29
                Session::delete($session_admin);
30
                redirect('/home/login/index.html')->send();
31
                exit;
32
            }
33

34
            // 5. 更新最后活动时间（滑动会话）
35
            Db::name('Admin')
36
                ->where(['id' => $this->uid])
37
                ->update(['last_login_time' => time()]);
38

39
            // 6. 锁屏检查
40
            if ($is_lock == 1) {
41
                redirect('/home/login/lock.html')->send();
42
                exit;
43
            }
44

45
            // 7. 将用户信息注入视图
46
            View::assign('login_admin', $login_admin);
47

48
            // 8. 部分控制器跳过权限检查
49
            $not_check = ['index','leaves','outs','overtimes','trips','message'];
50
            if ($this->module == 'home' && in_array($this->controller, $not_check)) {
51
                return true;
52
            } else {
53
                // 9. 强制修改初始密码
54
                $regPwd = $login_admin['reg_pwd'];
55
                if ($regPwd !== '') {
56
                    redirect('/home/index/edit_password.html')->send();
57
                    exit;
58
                }
59

60
                // 10. RBAC 权限检查
61
                if (!$this->checkAuth()) {
62
                    if (request()->isAjax()) {
63
                        return to_assign(405, '你没有权限');
64
                    } else {
65
                        redirect('/home/index/role')->send();
66
                        exit;
67
                    }
68
                }
69
            }
70
        }
71
    }
72
}

1
请求进入
2
  │
3
  ├─ controller == login/captcha? ──→ 跳过检查
4
  │
5
  ├─ Session 存在? ──No──→ 重定向登录页
6
  │
7
  ├─ 加载用户信息 (uid, did, pid)
8
  │
9
  ├─ 超过10小时? ──Yes──→ 清除Session，重定向登录页
10
  │
11
  ├─ 更新 last_login_time（滑动会话）
12
  │
13
  ├─ is_lock == 1? ──Yes──→ 重定向锁屏页
14
  │
15
  ├─ 注入 login_admin 到视图
16
  │
17
  ├─ 控制器在白名单? ──Yes──→ 通过
18
  │
19
  ├─ reg_pwd 非空? ──Yes──→ 重定向修改密码页
20
  │
21
  └─ RBAC checkAuth() ──Fail──→ 405无权限
22
                    └─Pass──→ 进入控制器方法

1
abstract class BaseController
2
{
3
    protected $jwt_conf = [
4
        'secrect' => 'gouguoa',
5
        'iss' => 'www.gougucms.com',
6
        'aud' => 'gouguoa',
7
        'exptime' => 7200,  // 2小时过期
8
    ];
9

10
    protected function apiReturn($data, int $code = 0, $msg = '',
11
        string $type = '', array $header = []): Response
12
    {
13
        $result = [
14
            'code' => $code,
15
            'msg'  => $msg,
16
            'time' => time(),
17
            'data' => $data,
18
        ];
19
        $response = Response::create($result, $type ?: 'json')->header($header);
20
        throw new HttpResponseException($response);
21
    }
22
}

1
class Login
2
{
3
    public function index()
4
    {
5
        // 检测企业微信环境
6
        $wxwork = is_wxwork();
7
        $mobile = is_mobile();
8
        if ($wxwork) {
9
            return redirect('/qiye/login/login');  // 企业微信端
10
        }
11
        if ($mobile) {
12
            return redirect('/qiye/login/index');  // 移动端
13
        }
14
        return View();  // PC端登录页
15
    }
16
}

1
public function login_submit()
2
{
3
    $param = get_params();
4

5
    // 1. 表单验证
6
    try {
7
        validate(UserCheck::class)->check($param);
8
    } catch (ValidateException $e) {
9
        return to_assign(1, $e->getError());
10
    }
11

12
    // 2. 支持用户名或手机号登录
13
    $admin = Db::name('Admin')
14
        ->where(['username' => $param['username'], 'delete_time' => 0])
15
        ->find();
16
    if (empty($admin)) {
17
        // 尝试用手机号查找
18
        $admin = Db::name('Admin')
19
            ->where(['mobile' => $param['username'], 'delete_time' => 0])
20
            ->find();
21
        if (empty($admin)) {
22
            return to_assign(1, '用户名或手机号码错误');
23
        }
24
    }
25

26
    // 3. 密码验证（salt + md5）
27
    $param['pwd'] = set_password($param['password'], $admin['salt']);
28
    if ($admin['pwd'] !== $param['pwd']) {
29
        return to_assign(1, '用户或密码错误');
30
    }
31

32
    // 4. 状态检查
33
    if ($admin['status'] != 1) {
34
        return to_assign(1, '该用户禁止登录');
35
    }
36

37
    // 5. 更新登录信息
38
    $data = [
39
        'is_lock' => 0,
40
        'last_login_time' => time(),
41
        'last_login_ip' => request()->ip(),
42
        'login_num' => $admin['login_num'] + 1,
43
    ];
44
    Db::name('admin')->where(['id' => $admin['id']])->update($data);
45

46
    // 6. 写入 Session
47
    $session_admin = get_config('app.session_admin');
48
    Session::set($session_admin, $admin['id']);
49

50
    // 7. 生成 Token（用于 API 调用）
51
    $token = make_token();
52
    set_cache($token, $admin, 7200);
53

54
    // 8. 记录登录日志
55
    $logdata = [
56
        'uid' => $admin['id'],
57
        'type' => 'login',
58
        'action' => '登录',
59
        'subject' => '系统',
60
        'param_id' => $admin['id'],
61
        'param' => '[]',
62
        'ip' => request()->ip(),
63
        'create_time' => time()
64
    ];
65
    Db::name('AdminLog')->strict(false)->field(true)->insert($logdata);
66

67
    return to_assign(0, '登录成功', ['uid' => $admin['id']]);
68
}

1
public function lock()
2
{
3
    $session_admin = get_config('app.session_admin');
4
    $admin_id = Session::get($session_admin);
5
    $admin = Db::name('admin')->where(['id' => $admin_id])->find();
6

7
    if (request()->isAjax()) {
8
        // 解锁：验证密码
9
        $param = get_params();
10
        $pwd = set_password($param['lock_password'], $admin['salt']);
11
        if ($admin['pwd'] !== $pwd) {
12
            return to_assign(1, '密码错误');
13
        }
14
        Db::name('admin')->where('id', $admin['id'])
15
            ->update(['is_lock' => 0]);
16
        return to_assign(0, '解锁成功', ['uid' => $admin['id']]);
17
    }
18

19
    // 锁屏：设置 is_lock = 1
20
    Db::name('admin')->where('id', $admin['id'])
21
        ->update(['is_lock' => 1]);
22
    return View();
23
}

1
用户输入用户名/密码
2
        │
3
        ▼
4
   UserCheck 验证器校验
5
        │
6
        ▼
7
   查询 Admin 表（用户名 OR 手机号）
8
        │
9
        ├─ 不存在 → "用户名或手机号码错误"
10
        │
11
        ▼
12
   set_password(password, salt) 加密比对
13
        │
14
        ├─ 不匹配 → "用户或密码错误"
15
        │
16
        ▼
17
   status != 1 → "禁止登录"
18
        │
19
        ▼
20
   更新 last_login_time, login_num, ip
21
        │
22
        ▼
23
   Session::set('gougu_admin', $admin_id)
24
        │
25
        ▼
26
   生成 Token，缓存 7200 秒
27
        │
28
        ▼
29
   记录 AdminLog 登录日志
30
        │
31
        ▼
32
   返回 {code:0, msg:'登录成功', data:{uid}}

1
用户(Admin)
2
  │
3
  ├── position_id → 岗位(Position)
4
  │                    │
5
  │                    └── PositionGroup → 角色组(AdminGroup)
6
  │                                          │
7
  │                                          └── rules (逗号分隔的规则ID)
8
  │                                                    │
9
  │                                                    └── AdminRule
10
  │                                                         ├── src: "finance/expense/datalist"
11
  │                                                         ├── title: "报销列表"
12
  │                                                         └── ...
13
  │
14
  ├── did → 部门(Department)
15
  └── pid → 岗位ID

1
namespace systematic;
2

3
use think\facade\Config;
4
use think\facade\Cache;
5
use think\facade\Db;
6

7
class Systematic
8
{
9
    public function auth($uid)
10
    {
11
        // 缓存未命中时重建
12
        if (!Cache::get('RulesSrc' . $uid) || !Cache::get('RulesSrc0')) {
13

14
            // 1. 获取用户岗位
15
            $position_id = Db::name('Admin')
16
                ->where('id', $uid)
17
                ->value('position_id');
18

19
            // 2. 通过岗位 → 岗位角色组关联表 → 获取角色组
20
            $groups = Db::name('PositionGroup')
21
                ->alias('a')
22
                ->join("AdminGroup g", "a.group_id=g.id", 'LEFT')
23
                ->where([
24
                    ['a.pid', '=', $position_id],
25
                    ['g.status', '=', 1]
26
                ])
27
                ->select()->toArray();
28

29
            // 3. 合并所有角色组的权限规则ID
30
            $ids = [];
31
            foreach ($groups as $g) {
32
                $ids = array_merge($ids, explode(',', trim($g['rules'], ',')));
33
            }
34
            $ids = array_unique($ids);
35

36
            // 4. 读取所有权限规则（用于超级管理员判断）
37
            $rules_all = Db::name('AdminRule')
38
                ->field('src')->select()->toArray();
39

40
            // 5. 读取当前用户的权限规则
41
            $rules = Db::name('AdminRule')
42
                ->where('id', 'in', $ids)
43
                ->field('src')->select()->toArray();
44

45
            // 6. 提取规则路径（小写化）
46
            $auth_list_all = [];
47
            $auth_list = [];
48
            foreach ($rules_all as $rule_all) {
49
                $auth_list_all[] = strtolower($rule_all['src']);
50
            }
51
            foreach ($rules as $rule) {
52
                $auth_list[] = strtolower($rule['src']);
53
            }
54

55
            // 7. 缓存 10 小时（36000秒）
56
            Cache::tag('adminRules')->set('RulesSrc0', $auth_list_all, 36000);
57
            Cache::tag('adminRules')->set('RulesSrc' . $uid, $auth_list, 36000);
58
        }
59
    }
60
}

1
FlowCate (流程分类)
2
  ├── name: "expense_check"        ← 业务标识
3
  ├── title: "报销审批"
4
  ├── check_table: "Expense"       ← 关联的业务表名
5
  ├── template_id: 1               ← 消息模板ID
6
  ├── is_back: 1                   ← 是否允许回退
7
  ├── is_reversed: 1               ← 是否允许反确认
8
  └── is_copy: 1                   ← 是否允许抄送
9

10
Flow (审批流程)
11
  ├── cate_id → FlowCate.id
12
  ├── flow_list: serialize(...)    ← 序列化的审批步骤配置
13
  └── department_ids: "1,2,3"     ← 适用部门（空=全部）
14

15
FlowStep (审批步骤实例)
16
  ├── action_id: 123               ← 业务记录ID
17
  ├── flow_id: 1                   ← 流程ID
18
  ├── sort: 0,1,2...               ← 步骤顺序
19
  ├── check_role: 1-5              ← 审批角色类型
20
  ├── check_types: 1会签 / 2或签
21
  ├── check_uids: "1,2,3"         ← 当前步骤审批人
22
  └── check_position_id: 5         ← 岗位ID（check_role=3时）
23

24
FlowRecord (审批记录)
25
  ├── action_id: 123
26
  ├── check_table: "Expense"
27
  ├── step_id → FlowStep.id
28
  ├── check_uid: 1                 ← 审批人
29
  ├── check_status: 0提交/1通过/2拒绝/3撤回/4反确认
30
  ├── check_files: "1,2"          ← 附件
31
  └── content: "同意"              ← 审批意见

1
public function submit_check()
2
{
3
    $param = get_params();
4
    $flow_cate = Db::name('FlowCate')
5
        ->where(['name' => $param['check_name']])->find();
6
    $flow_list = Db::name('Flow')
7
        ->where('id', $param['flow_id'])->value('flow_list');
8
    $flow = unserialize($flow_list);
9

10
    $check_table = $flow_cate['check_table'];
11

12
    // 1. 删除原有的审批步骤和记录（重新提交场景）
13
    Db::name('FlowStep')
14
        ->where(['action_id' => $param['action_id'], 'flow_id' => $param['flow_id']])
15
        ->update(['delete_time' => time()]);
16
    Db::name('FlowRecord')
17
        ->where(['action_id' => $param['action_id'], 'check_table' => $check_table])
18
        ->update(['delete_time' => time()]);
19

20
    // 2. 创建提交记录
21
    $recordData = [
22
        'action_id' => $param['action_id'],
23
        'check_table' => $check_table,
24
        'step_id' => 0,
25
        'check_uid' => $this->uid,
26
        'check_status' => 0,    // 提交
27
        'content' => '提交申请',
28
        'create_time' => time()
29
    ];
30

31
    if (!isset($param['check_uids'])) {
32
        // ===== 固定流程模式 =====
33
        $step = [];
34
        $sort = 0;
35
        foreach ($flow as $value) {
36
            // 根据 check_role 解析审批人
37
            if ($value['check_role'] == 1) {
38
                $value['check_uids'] = get_department_leader($this->uid);
39
                $value['flow_name'] = '当前部门负责人';
40
            }
41
            if ($value['check_role'] == 2) {
42
                $value['check_uids'] = get_department_leader($this->uid, 1);
43
                $value['flow_name'] = '上级部门负责人';
44
            }
45
            if ($value['check_role'] == 3) {
46
                $check_uids = Db::name('Admin')
47
                    ->where(['position_id' => $value['check_position_id'], 'status' => 1])
48
                    ->column('id');
49
                $value['check_uids'] = implode(',', $check_uids);
50
                $value['flow_name'] = $check_position;
51
            }
52
            // ... check_role 4, 5 略
53

54
            if (!empty($value['check_uids'])) {
55
                $step[] = [
56
                    'action_id' => $param['action_id'],
57
                    'flow_id' => $param['flow_id'],
58
                    'check_uids' => $value['check_uids'],
59
                    'check_role' => $value['check_role'],
60
                    'check_types' => $value['check_types'],
61
                    'sort' => $sort
62
                ];
63
                $sort++;
64
            }
65
        }
66

67
        // 3. 批量插入审批步骤
68
        Db::name('FlowStep')->insertAll($step);
69

70
        // 4. 更新业务表状态
71
        Db::name($check_table)->where('id', $param['action_id'])->update([
72
            'check_flow_id' => $param['flow_id'],
73
            'check_status' => 1,              // 审批中
74
            'check_step_sort' => 0,           // 当前步骤
75
            'check_uids' => $step[0]['check_uids'],  // 当前审批人
76
            'check_copy_uids' => $param['check_copy_uids'] ?? ''
77
        ]);
78

79
        // 5. 发送消息通知（事件机制）
80
        if ($flow_cate['template_id'] > 0) {
81
            event('SendMessage', [
82
                'from_uid' => $this->uid,
83
                'to_uids' => $step[0]['check_uids'],
84
                'template_id' => $flow_cate['template_id'],
85
                'content' => ['action_id' => $param['action_id'], 'title' => $subject]
86
            ]);
87
        }
88
    } else {
89
        // ===== 自由审批模式 =====
90
        // 直接使用提交者指定的审批人
91
        Db::name('FlowStep')->insert([
92
            'action_id' => $param['action_id'],
93
            'flow_id' => $param['flow_id'],
94
            'check_uids' => $param['check_uids'],
95
            'flow_name' => '自由审批',
96
        ]);
97
        // ... 更新业务表 + 发送通知
98
    }
99
}

1
public function flow_check()
2
{
3
    $param = get_params();
4
    $detail = Db::name($check_table)->where('id', $action_id)->find();
5
    $step = Db::name('FlowStep')
6
        ->where(['action_id' => $action_id, 'sort' => $detail['check_step_sort']])
7
        ->find();
8

9
    if ($param['check'] == 1) {
10
        // === 审批通过 ===
11

12
        // 1. 验证当前用户是否有审批权限
13
        $check_uids = explode(",", $detail['check_uids']);
14
        if (!in_array($this->uid, $check_uids)) {
15
            return to_assign(1, '您没权限审核该审批');
16
        }
17

18
        if ($step['check_role'] == 0) {
19
            // 自由人审批
20
            if ($param['check_node'] == 2) {
21
                // 继续下一步（手动指定）
22
                $next_step = $detail['check_step_sort'] + 1;
23
                // ... 插入新步骤
24
            } else {
25
                // 审核结束
26
                $param['check_status'] = 2;  // 审核完成
27
            }
28
        } else {
29
            // 固定流程审批
30
            $check_count = Db::name('FlowRecord')
31
                ->where(['step_id' => $step['id']])->count();
32
            $flow_count = explode(',', $step['check_uids']);
33

34
            // 从当前审批人中移除自己
35
            $new_uids = array_diff($check_uids, [$this->uid]);
36
            $param['check_uids'] = implode(',', $new_uids);
37

38
            // 判断是否本步骤所有人审批完成
39
            // check_types=1: 会签（所有人通过才算通过）
40
            // check_types=2: 或签（任一人通过即通过）
41
            if ((($check_count + 1) >= count($flow_count) && $step['check_types'] == 1)
42
                || $step['check_types'] == 2) {
43

44
                // 查找下一步
45
                $next_step = Db::name('FlowStep')
46
                    ->where(['sort' => $detail['check_step_sort'] + 1])
47
                    ->find();
48

49
                if ($next_step) {
50
                    // 存在下一步 → 解析下一步审批人
51
                    if ($next_step['check_role'] == 1) {
52
                        $param['check_uids'] = get_department_leader($detail['admin_id']);
53
                    } elseif ($next_step['check_role'] == 2) {
54
                        $param['check_uids'] = get_department_leader($detail['admin_id'], 1);
55
                    } elseif ($next_step['check_role'] == 3) {
56
                        $uids = Db::name('Admin')
57
                            ->where(['position_id' => $next_step['check_position_id']])
58
                            ->column('id');
59
                        $param['check_uids'] = implode(',', $uids);
60
                    } else {
61
                        $param['check_uids'] = $next_step['check_uids'];
62
                    }
63
                    $param['check_step_sort'] = $detail['check_step_sort'] + 1;
64
                    $param['check_status'] = 1;  // 仍审批中
65
                } else {
66
                    // 不存在下一步 → 审核结束
67
                    $param['check_status'] = 2;  // 审核完成
68
                    $param['check_uids'] = '';
69
                }
70
            } else {
71
                // 本步骤还有人未审批 → 不发送消息
72
                $param['send_msg'] = 0;
73
            }
74
        }
75

76
        // 2. 添加历史审核人
77
        $param['check_history_uids'] = empty($detail['check_history_uids'])
78
            ? $this->uid
79
            : $detail['check_history_uids'] . ',' . $this->uid;
80

81
        // 3. 更新业务表
82
        Db::name($check_table)->where('id', $action_id)->update($param);
83

84
        // 4. 记录审批日志
85
        Db::name('FlowRecord')->insert([
86
            'action_id' => $action_id,
87
            'check_uid' => $this->uid,
88
            'check_status' => 1,  // 通过
89
            'content' => $param['content'],
90
            'check_files' => $param['check_files'],
91
            'check_time' => time(),
92
        ]);
93

94
        // 5. 发送消息通知（审批中→下一审批人 / 审核完成→提交人+抄送人）
95
        if ($param['check_status'] == 1 && $param['send_msg'] == 1) {
96
            event('SendMessage', [...]);  // 通知下一审批人
97
        }
98
        if ($param['check_status'] == 2) {
99
            event('SendMessage', [...]);  // 通知提交人：审核通过
100
            if (!empty($detail['check_copy_uids'])) {
101
                event('SendMessage', [...]);  // 通知抄送人
102
            }
103
        }
104
    }
105

106
    // check=2: 审批拒绝（支持 check_role=5 回退到上一步）
107
    // check=3: 审批撤回（仅提交人可操作）
108
    // check=4: 审批反确认（打回重新提交）
109
}