update

backend/controllers/CoinWithholdController.php

@@ -132,6 +132,9 @@ class CoinWithholdController extends BaseController
             $id = Yii::$app->request->get('id', 0);
             if (ctype_digit($id)) {
                 $model = CoinWithholdToken::findOne($id);
+                if ($model->platform_id != Yii::$app->user->identity->platform_id) {
+                    return ['code' => -1, 'msg' => '没有权限删除'];
+                }
                 if ($model && $model->delete()) {
                     return ['code' => 0, 'msg' => '删除成功'];
                 }