完善审计日志展示与导出权限

backend/app/api/v1/subject_histories.py

@@ -1,4 +1,5 @@
 import uuid
+import json
 
 from fastapi import APIRouter, Depends, HTTPException, status
 from sqlalchemy.ext.asyncio import AsyncSession
@@ -14,6 +15,26 @@ from app.schemas.subject_history import SubjectHistoryCreate, SubjectHistoryRead
 router = APIRouter()
 
 
+def _compact_text(value: str | None, max_length: int = 30) -> str:
+    text = " ".join(str(value or "").split())
+    if len(text) <= max_length:
+        return text
+    return f"{text[:max_length]}..."
+
+
+def _history_audit_name(subject, history) -> str:
+    subject_no = getattr(subject, "subject_no", None) or "参与者"
+    record_date = getattr(history, "record_date", None)
+    content = _compact_text(getattr(history, "content", None))
+    suffix = record_date.isoformat() if record_date else content
+    return f"{subject_no} / {suffix}" if suffix else subject_no
+
+
+def _history_audit_detail(action: str, subject, history) -> str:
+    name = _history_audit_name(subject, history)
+    return json.dumps({"targetName": name, "description": f"{action}病史记录“{name}”"}, ensure_ascii=False)
+
+
 async def _ensure_study_exists(db: AsyncSession, study_id: uuid.UUID):
     study = await study_crud.get(db, study_id)
     if not study:
@@ -56,7 +77,7 @@ async def create_history(
         entity_type="subject_history",
         entity_id=history.id,
         action="CREATE_SUBJECT_HISTORY",
-        detail="病史记录已创建",
+        detail=_history_audit_detail("创建", subject, history),
         operator_id=current_user.id,
         operator_role=await get_operator_role_label(db, study_id, current_user),
     )
@@ -131,7 +152,7 @@ async def update_history(
         entity_type="subject_history",
         entity_id=history_id,
         action="UPDATE_SUBJECT_HISTORY",
-        detail="病史记录已更新",
+        detail=_history_audit_detail("更新", subject, history),
         operator_id=current_user.id,
         operator_role=await get_operator_role_label(db, study_id, current_user),
     )
@@ -157,6 +178,7 @@ async def delete_history(
     history = await history_crud.get_history(db, history_id)
     if not history or history.study_id != study_id or history.subject_id != subject_id:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="病史记录不存在")
+    history_detail = _history_audit_detail("删除", subject, history)
     await history_crud.delete_history(db, history)
     await audit_crud.log_action(
         db,
@@ -164,7 +186,7 @@ async def delete_history(
         entity_type="subject_history",
         entity_id=history_id,
         action="DELETE_SUBJECT_HISTORY",
-        detail="病史记录已删除",
+        detail=history_detail,
         operator_id=current_user.id,
         operator_role=await get_operator_role_label(db, study_id, current_user),
     )