立项配置数据入库、审计日志数据入库、编辑页UI界面美化、设备管理内容补充、审计日志显示优化

backend/app/api/v1/audit_logs.py

@@ -3,9 +3,9 @@ import uuid
 from fastapi import APIRouter, Depends, HTTPException, status
 from sqlalchemy.ext.asyncio import AsyncSession
 
-from app.core.deps import get_db_session, require_roles, require_study_member
+from app.core.deps import get_current_user, get_db_session, require_roles, require_study_member
 from app.crud import audit as audit_crud
-from app.schemas.audit import AuditLogRead
+from app.schemas.audit import AuditEventCreate, AuditLogRead
 
 router = APIRouter()
 
@@ -52,3 +52,30 @@ async def delete_audit_log(
     if not log or log.study_id != study_id:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="审计日志不存在")
     await audit_crud.delete_log(db, log)
+
+
+@router.post(
+    "/events",
+    status_code=status.HTTP_201_CREATED,
+    dependencies=[Depends(require_study_member())],
+)
+async def create_audit_event(
+    study_id: uuid.UUID,
+    payload: AuditEventCreate,
+    db: AsyncSession = Depends(get_db_session),
+    current_user=Depends(get_current_user),
+):
+    allowed_actions = {"AUDIT_EXPORT_SYSTEM", "AUDIT_EXPORT_PROJECT"}
+    if payload.action not in allowed_actions:
+        raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="不支持的审计事件")
+    await audit_crud.log_action(
+        db,
+        study_id=study_id,
+        entity_type=payload.entity_type or "audit_log",
+        entity_id=payload.entity_id,
+        action=payload.action,
+        detail=payload.detail,
+        operator_id=current_user.id,
+        operator_role=current_user.role,
+    )
+    return {"ok": True}