1.E:\WWW\ranzhi\app\crm\contract\control.php 输入地址也不能查看修改别人的合同
receive edit delivery cancel delete 方法

 $contract     = $this->contract->getByID($contractID); 下加
$this->loadModel('common', 'sys')->checkPrivByCustomer(empty($contract)? '0' : $contract->customer, 'edit');


2. E:\WWW\ranzhi\app\sys\group\lang\resource.php 297行 添加

$lang->resource->trade->out      = 'out';


315行会  

$lang->trade->methodOrder[66] = 'out';  //支出



E:\WWW\ranzhi\app\cash\trade\model.php    checkExpensePriv 方法
if语句 括号内 改为 

!isset($rights['trade']['out'])