更新

server/app/adminapi/logic/firstvisit/WecomAcquisitionCustomerLogic.php

@@ -105,7 +105,7 @@ class WecomAcquisitionCustomerLogic
             ->leftJoin('dept d', 'd.id = c.dept_id')
             ->leftJoin('qywx_promotion_link l', 'l.id = c.promotion_link_id')
             ->leftJoin('qywx_promotion_pool p', 'p.id = l.pool_id');
-        self::applyScope($query, 'c', $visibleIds);
+        self::applyCustomerScope($query, $visibleIds);
         $localLinkId = max(0, (int) ($params['promotion_link_id'] ?? 0));
         if ($localLinkId > 0) {
             $query->where('c.promotion_link_id', $localLinkId);
@@ -125,6 +125,31 @@ class WecomAcquisitionCustomerLogic
         return $query;
     }
 
+    /**
+     * 客户优先按实际承接成员做数据隔离；企微成员尚未绑定后台账号时，改按获客链接归属兜底。
+     *
+     * 企微 customer_list 的 state/customer_channel 允许为空，不能因此丢掉已返回的客户；
+     * 同时也不能直接放开全部 owner_admin_id=0 的记录，否则会跨部门泄露未映射客户。
+     */
+    private static function applyCustomerScope($query, ?array $visibleIds): void
+    {
+        if ($visibleIds === null) {
+            return;
+        }
+        if ($visibleIds === []) {
+            $query->whereRaw('1 = 0');
+            return;
+        }
+        $ids = array_values(array_unique(array_map('intval', $visibleIds)));
+        $query->where(function ($scope) use ($ids): void {
+            $scope->whereIn('c.owner_admin_id', $ids)
+                ->whereOr(function ($unmapped) use ($ids): void {
+                    $unmapped->where('c.owner_admin_id', 0)
+                        ->whereIn('l.owner_admin_id', $ids);
+                });
+        });
+    }
+
     private static function applyScope($query, string $alias, ?array $visibleIds): void
     {
         if ($visibleIds === null) {