完善审计日志展示与导出权限

backend/app/api/v1/material_equipments.py

@@ -1,4 +1,5 @@
 import uuid
+import json
 
 from fastapi import APIRouter, Depends, HTTPException, status
 from sqlalchemy.ext.asyncio import AsyncSession
@@ -24,6 +25,18 @@ def _validate_calibration(need_calibration: bool, calibration_cycle_days: int |
         raise HTTPException(status_code=status.HTTP_422_UNPROCESSABLE_ENTITY, detail="需要校准时校准周期必须大于0")
 
 
+def _equipment_audit_name(item) -> str:
+    parts = [item.name, item.spec_model, item.brand]
+    return " / ".join(str(part).strip() for part in parts if str(part or "").strip()) or "设备记录"
+
+
+def _equipment_audit_detail(action: str, item) -> str:
+    return json.dumps(
+        {"targetName": _equipment_audit_name(item), "description": f"{action}设备“{_equipment_audit_name(item)}”"},
+        ensure_ascii=False,
+    )
+
+
 @router.post(
     "/equipment",
     response_model=MaterialEquipmentRead,
@@ -47,7 +60,7 @@ async def create_equipment(
         entity_type="material_equipment",
         entity_id=item.id,
         action="CREATE_MATERIAL_EQUIPMENT",
-        detail=f"设备 {item.id} 已创建",
+        detail=_equipment_audit_detail("创建", item),
         operator_id=current_user.id,
         operator_role=await get_operator_role_label(db, study_id, current_user),
     )
@@ -118,7 +131,7 @@ async def update_equipment(
         entity_type="material_equipment",
         entity_id=equipment_id,
         action="UPDATE_MATERIAL_EQUIPMENT",
-        detail=f"设备 {equipment_id} 已更新",
+        detail=_equipment_audit_detail("更新", item),
         operator_id=current_user.id,
         operator_role=await get_operator_role_label(db, study_id, current_user),
     )
@@ -140,6 +153,7 @@ async def delete_equipment(
     item = await equipment_crud.get_equipment(db, equipment_id)
     if not item or item.study_id != study_id:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="设备记录不存在")
+    equipment_detail = _equipment_audit_detail("删除", item)
     await equipment_crud.delete_equipment(db, item)
     await audit_crud.log_action(
         db,
@@ -147,7 +161,7 @@ async def delete_equipment(
         entity_type="material_equipment",
         entity_id=equipment_id,
         action="DELETE_MATERIAL_EQUIPMENT",
-        detail=f"设备 {equipment_id} 已删除",
+        detail=equipment_detail,
         operator_id=current_user.id,
         operator_role=await get_operator_role_label(db, study_id, current_user),
     )