完善审计日志展示与导出权限

backend/app/api/v1/audit_logs.py

@@ -1,15 +1,34 @@
+import json
 import uuid
 
 from fastapi import APIRouter, Depends, HTTPException, status
 from sqlalchemy.ext.asyncio import AsyncSession
 
-from app.core.deps import get_operator_role_label, get_current_user, get_db_session, require_roles, require_api_permission
+from app.core.deps import get_operator_role_label, get_current_user, get_db_session, require_api_permission
 from app.crud import audit as audit_crud
+from app.crud import study as study_crud
 from app.schemas.audit import AuditEventCreate, AuditLogRead
 
 router = APIRouter()
 
 
+async def _build_export_audit_detail(db: AsyncSession, study_id: uuid.UUID, action: str) -> str:
+    study = await study_crud.get(db, study_id)
+    if not study:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="项目不存在")
+    scope = "system" if action == "AUDIT_EXPORT_SYSTEM" else "project"
+    description = "导出了系统审计日志" if scope == "system" else f"导出了项目审计日志：{study.name}"
+    return json.dumps(
+        {
+            "targetName": "系统审计日志" if scope == "system" else study.name,
+            "scope": scope,
+            "description": description,
+            "result": "SUCCESS",
+        },
+        ensure_ascii=False,
+    )
+
+
 @router.get(
     "/",
     response_model=list[AuditLogRead],
@@ -38,22 +57,6 @@ async def list_audit_logs(
     return list(logs)
 
 
-@router.delete(
-    "/{log_id}",
-    status_code=status.HTTP_204_NO_CONTENT,
-    dependencies=[Depends(require_roles(["ADMIN"]))],
-)
-async def delete_audit_log(
-    study_id: uuid.UUID,
-    log_id: uuid.UUID,
-    db: AsyncSession = Depends(get_db_session),
-):
-    log = await audit_crud.get_log(db, log_id)
-    if not log or log.study_id != study_id:
-        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="审计日志不存在")
-    await audit_crud.delete_log(db, log)
-
-
 @router.post(
     "/events",
     status_code=status.HTTP_201_CREATED,
@@ -71,10 +74,10 @@ async def create_audit_event(
     await audit_crud.log_action(
         db,
         study_id=study_id,
-        entity_type=payload.entity_type or "audit_log",
-        entity_id=payload.entity_id,
+        entity_type="audit_log",
+        entity_id=None,
         action=payload.action,
-        detail=payload.detail,
+        detail=await _build_export_audit_detail(db, study_id, payload.action),
         operator_id=current_user.id,
         operator_role=await get_operator_role_label(db, study_id, current_user),
     )