Merge branch 'liuzj-permission-dev' into test

modules/Jiesuan/Http/Controllers/BankAccountController.php

@@ -33,9 +33,10 @@ class BankAccountController extends CatchController
 
         $company_uid = $this->getLoginUserId();
         $id = $request->input('id');
-        $data = $request->all();
         $now = date('Y-m-d H:i:s');
         if($id) {
+            $data = $request->only(['owner_name', 'name_of_payee', 'card_no',
+                'bank_name', 'sub_bank_name', 'phone_of_payee', 'business_id']);
             $data['updated_at'] = $now;
             // 只有待审核的允许修改
             DB::table('bank_cards')
@@ -43,6 +44,7 @@ class BankAccountController extends CatchController
                     'id' => $id, 'status' => 1, 'company_uid'=> $company_uid
                 ])->update($data);
         } else {
+            $data = $request->all();
             $data['status'] = 1;
             $data['updated_at'] = $data['created_at'] = $now;
             $data['company_uid'] = $company_uid;