权限监控与管理界面全面美化

重新设计权限系统所有 UI 组件的视觉风格，统一配色、圆角、阴影和交互动效： - 实时概览：统计卡片加图标和渐变色条，健康评分改为环形进度，告警改为卡片式 - 趋势分析：图表卡片加彩色图标标识，ECharts 配色升级为渐变面积填充 - 访问日志：指标卡片带图标，日志审计改为卡片式入口，IP排行前三高亮 - IP属地：工具栏重设计，排行列表前三渐变高亮，指标卡片统一新风格 - 系统级权限：从 el-table 改为自定义卡片列表，模块块独立圆角卡片 - 项目权限配置：空状态引导优化，成员表格加头像，工具栏加背景容器 - 角色概览卡片：加进度条可视化，hover 微动效 - 接口权限矩阵：工具栏分离布局，表格圆角包裹 - 角色管理抽屉：侧边栏选中态渐变，操作行 hover 高亮 Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-20 14:36:35 +08:00
parent e95eeed90e
commit 6cefa620e4
68 changed files with 6927 additions and 984 deletions
@@ -0,0 +1,59 @@
+"""add permission monitoring tables
+
+Revision ID: 20260519_01
+Revises: 20260518_01
+Create Date: 2026-05-19 10:00:00.000000
+
+"""
+
+from typing import Sequence, Union
+
+import sqlalchemy as sa
+from sqlalchemy.dialects import postgresql
+from alembic import op
+
+revision: str = "20260519_01"
+down_revision: Union[str, None] = "20260518_01"
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    op.create_table(
+        "permission_access_logs",
+        sa.Column("id", postgresql.UUID(as_uuid=True), primary_key=True),
+        sa.Column("study_id", postgresql.UUID(as_uuid=True), sa.ForeignKey("studies.id"), nullable=False),
+        sa.Column("user_id", postgresql.UUID(as_uuid=True), sa.ForeignKey("users.id"), nullable=False),
+        sa.Column("endpoint_key", sa.String(100), nullable=False),
+        sa.Column("role", sa.String(30), nullable=False),
+        sa.Column("allowed", sa.Boolean(), nullable=False),
+        sa.Column("elapsed_ms", sa.Float(), nullable=False),
+        sa.Column("ip_address", sa.String(45), nullable=True),
+        sa.Column("created_at", sa.DateTime(timezone=True), nullable=False, server_default=sa.func.now()),
+    )
+    op.create_index("ix_perm_log_study_created", "permission_access_logs", ["study_id", "created_at"])
+    op.create_index("ix_perm_log_user_created", "permission_access_logs", ["user_id", "created_at"])
+    op.create_index("ix_perm_log_endpoint_created", "permission_access_logs", ["endpoint_key", "created_at"])
+    op.create_index("ix_perm_log_created_at", "permission_access_logs", ["created_at"])
+    op.create_index("ix_perm_log_allowed", "permission_access_logs", ["allowed", "created_at"])
+
+    op.create_table(
+        "permission_metric_snapshots",
+        sa.Column("id", postgresql.UUID(as_uuid=True), primary_key=True),
+        sa.Column("bucket_time", sa.DateTime(timezone=True), nullable=False),
+        sa.Column("total_checks", sa.Integer(), nullable=False, server_default="0"),
+        sa.Column("allowed_checks", sa.Integer(), nullable=False, server_default="0"),
+        sa.Column("denied_checks", sa.Integer(), nullable=False, server_default="0"),
+        sa.Column("avg_elapsed_ms", sa.Float(), nullable=False, server_default="0"),
+        sa.Column("max_elapsed_ms", sa.Float(), nullable=False, server_default="0"),
+        sa.Column("cache_hits", sa.Integer(), nullable=False, server_default="0"),
+        sa.Column("cache_misses", sa.Integer(), nullable=False, server_default="0"),
+        sa.Column("error_count", sa.Integer(), nullable=False, server_default="0"),
+        sa.Column("created_at", sa.DateTime(timezone=True), nullable=False, server_default=sa.func.now()),
+    )
+    op.create_index("ix_perm_snapshot_bucket", "permission_metric_snapshots", ["bucket_time"])
+
+
+def downgrade() -> None:
+    op.drop_table("permission_metric_snapshots")
+    op.drop_table("permission_access_logs")
@@ -0,0 +1,42 @@
+"""add security access logs
+
+Revision ID: 20260520_01
+Revises: 20260519_01
+Create Date: 2026-05-20 10:40:00.000000
+
+"""
+
+from typing import Sequence, Union
+
+import sqlalchemy as sa
+from sqlalchemy.dialects import postgresql
+from alembic import op
+
+revision: str = "20260520_01"
+down_revision: Union[str, None] = "20260519_01"
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    op.create_table(
+        "security_access_logs",
+        sa.Column("id", postgresql.UUID(as_uuid=True), primary_key=True),
+        sa.Column("method", sa.String(12), nullable=False),
+        sa.Column("path", sa.String(500), nullable=False),
+        sa.Column("status_code", sa.Integer(), nullable=False),
+        sa.Column("elapsed_ms", sa.Float(), nullable=False),
+        sa.Column("client_ip", sa.String(45), nullable=True),
+        sa.Column("user_agent", sa.String(500), nullable=True),
+        sa.Column("auth_status", sa.String(30), nullable=False),
+        sa.Column("user_identifier", sa.String(80), nullable=True),
+        sa.Column("created_at", sa.DateTime(timezone=True), nullable=False, server_default=sa.func.now()),
+    )
+    op.create_index("ix_security_log_created_at", "security_access_logs", ["created_at"])
+    op.create_index("ix_security_log_ip_created", "security_access_logs", ["client_ip", "created_at"])
+    op.create_index("ix_security_log_status_created", "security_access_logs", ["status_code", "created_at"])
+    op.create_index("ix_security_log_auth_created", "security_access_logs", ["auth_status", "created_at"])
+
+
+def downgrade() -> None:
+    op.drop_table("security_access_logs")