完善审计日志展示与导出权限

backend/app/api/v1/aes.py

@@ -44,6 +44,15 @@ def _is_overdue(ae: AERead) -> bool:
     return bool(ae.report_due_date and date.today() > ae.report_due_date and ae.status != "CLOSED")
 
 
+def _ae_audit_name(ae) -> str:
+    return str(getattr(ae, "term", "") or "").strip() or "AE 记录"
+
+
+def _ae_audit_detail(action: str, ae) -> str:
+    name = _ae_audit_name(ae)
+    return json.dumps({"targetName": name, "description": f"{action}AE“{name}”"}, ensure_ascii=False)
+
+
 @router.post(
     "/",
     response_model=AERead,
@@ -77,7 +86,7 @@ async def create_ae(
         entity_type="ae",
         entity_id=ae.id,
         action="CREATE_AE",
-        detail=f"AE {ae.id} 已创建",
+        detail=_ae_audit_detail("创建", ae),
         operator_id=current_user.id,
         operator_role=await get_operator_role_label(db, study_id, current_user),
     )
@@ -247,7 +256,16 @@ async def update_ae(
         entity_type="ae",
         entity_id=ae_id,
         action=action,
-        detail=json.dumps({"before": detail_before, "after": detail_after}, ensure_ascii=False, default=str),
+        detail=json.dumps(
+            {
+                "targetName": _ae_audit_name(updated),
+                "description": f"{'变更' if action == 'AE_STATUS_CHANGE' else '更新'}AE“{_ae_audit_name(updated)}”",
+                "before": detail_before,
+                "after": detail_after,
+            },
+            ensure_ascii=False,
+            default=str,
+        ),
         operator_id=current_user.id,
         operator_role=await get_operator_role_label(db, study_id, current_user),
     )
@@ -272,6 +290,7 @@ async def delete_ae(
     if not ae or ae.study_id != study_id:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="AE 不存在")
     await _ensure_ae_visible(db, study_id, AERead.model_validate(ae))
+    ae_detail = _ae_audit_detail("删除", ae)
     await ae_crud.delete_ae(db, ae)
     await audit_crud.log_action(
         db,
@@ -279,7 +298,7 @@ async def delete_ae(
         entity_type="ae",
         entity_id=ae_id,
         action="DELETE_AE",
-        detail=f"AE {ae_id} 已删除",
+        detail=ae_detail,
         operator_id=current_user.id,
         operator_role=await get_operator_role_label(db, study_id, current_user),
     )