完善审计日志展示与导出权限

backend/app/api/v1/precautions.py

@@ -1,4 +1,5 @@
 import uuid
+import json
 
 from fastapi import APIRouter, Depends, HTTPException, status
 from sqlalchemy.ext.asyncio import AsyncSession
@@ -28,6 +29,11 @@ async def _ensure_site_name_active(db: AsyncSession, study_id: uuid.UUID, site_n
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="中心已停用")
 
 
+def _precaution_audit_detail(action: str, precaution) -> str:
+    title = str(precaution.title or "").strip() or "注意事项"
+    return json.dumps({"targetName": title, "description": f"{action}注意事项“{title}”"}, ensure_ascii=False)
+
+
 @router.post(
     "/precautions",
     response_model=PrecautionRead,
@@ -49,7 +55,7 @@ async def create_precaution(
         entity_type="precaution",
         entity_id=precaution.id,
         action="CREATE_PRECAUTION",
-        detail=f"注意事项 {precaution.title} 已创建",
+        detail=_precaution_audit_detail("创建", precaution),
         operator_id=current_user.id,
         operator_role=await get_operator_role_label(db, study_id, current_user),
     )
@@ -115,7 +121,7 @@ async def update_precaution(
         entity_type="precaution",
         entity_id=precaution_id,
         action="UPDATE_PRECAUTION",
-        detail=f"注意事项 {precaution_id} 已更新",
+        detail=_precaution_audit_detail("更新", precaution),
         operator_id=current_user.id,
         operator_role=await get_operator_role_label(db, study_id, current_user),
     )
@@ -138,6 +144,7 @@ async def delete_precaution(
     if not precaution or precaution.study_id != study_id:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="注意事项不存在")
     await _ensure_site_name_active(db, study_id, precaution.site_name)
+    precaution_detail = _precaution_audit_detail("删除", precaution)
     await precaution_crud.delete_precaution(db, precaution)
     await audit_crud.log_action(
         db,
@@ -145,7 +152,7 @@ async def delete_precaution(
         entity_type="precaution",
         entity_id=precaution_id,
         action="DELETE_PRECAUTION",
-        detail=f"注意事项 {precaution_id} 已删除",
+        detail=precaution_detail,
         operator_id=current_user.id,
         operator_role=await get_operator_role_label(db, study_id, current_user),
     )