群未设置修改权限时，群员也可以修改2

app/enterprise/controller/Group.php

@@ -90,7 +90,7 @@ class Group extends BaseController
       $param = $this->request->param();
       $group_id = explode('-', $param['id'])[1];
       $role=GroupUser::where(['group_id'=>$group_id,'user_id'=>$this->userInfo['user_id']])->value('role');
-      $group = GroupModel::where('id', $group_id)->field('setting')->find();
+      $group = GroupModel::where('group_id', $group_id)->field('setting')->find();
       $setting = $group['setting']?json_decode($group['setting'],true):['manage' => 0, 'invite' => 1, 'nospeak' => 0];
       if($role>2 && $setting['manage'] > 0){
          return warning(lang('group.notAuth'));