"""接口级权限配置 定义系统中所有API端点的权限配置，支持细粒度的接口级权限控制。 """ from __future__ import annotations # 接口级权限配置 # 格式: "业务操作名": {配置信息} API_ENDPOINT_PERMISSIONS = { # 参与者管理 (subjects) "subjects:create": { "module": "subjects", "action": "write", "description": "创建参与者", "default_roles": ["PM", "CRA"], }, "subjects:list": { "module": "subjects", "action": "read", "description": "查询参与者列表", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP", "QA"], }, "subjects:read": { "module": "subjects", "action": "read", "description": "查询参与者详情", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP", "QA"], }, "subjects:update": { "module": "subjects", "action": "write", "description": "更新参与者", "default_roles": ["PM", "CRA"], }, "subjects:delete": { "module": "subjects", "action": "write", "description": "删除参与者", "default_roles": ["PM"], }, # 访视管理 (visits) "visits:create": { "module": "subjects", "action": "write", "description": "创建访视", "default_roles": ["PM", "CRA"], }, "visits:list": { "module": "subjects", "action": "read", "description": "查询访视列表", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP", "QA"], }, "visits:read": { "module": "subjects", "action": "read", "description": "查询访视详情", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP", "QA"], }, "visits:update": { "module": "subjects", "action": "write", "description": "更新访视", "default_roles": ["PM", "CRA"], }, "visits:delete": { "module": "subjects", "action": "write", "description": "删除访视", "default_roles": ["PM"], }, # 不良事件 (risk_issues) "risk_issues:create": { "module": "risk_issues", "action": "write", "description": "创建不良事件", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"], }, "risk_issues:list": { "module": "risk_issues", "action": "read", "description": "查询不良事件列表", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP", "QA"], }, "risk_issues:read": { "module": "risk_issues", "action": "read", "description": "查询不良事件详情", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP", "QA"], }, "risk_issues:update": { "module": "risk_issues", "action": "write", "description": "更新不良事件", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"], }, "risk_issues:delete": { "module": "risk_issues", "action": "write", "description": "删除不良事件", "default_roles": ["PM"], }, # 财务合同管理 (finance_contracts) "finance_contracts:create": { "module": "fees", "action": "write", "description": "创建财务合同", "default_roles": ["PM"], }, "finance_contracts:list": { "module": "fees", "action": "read", "description": "查询财务合同列表", "default_roles": ["PM", "CRA", "IMP"], }, "finance_contracts:read": { "module": "fees", "action": "read", "description": "查询财务合同详情", "default_roles": ["PM", "CRA", "IMP"], }, "finance_contracts:update": { "module": "fees", "action": "write", "description": "更新财务合同", "default_roles": ["PM"], }, "finance_contracts:delete": { "module": "fees", "action": "write", "description": "删除财务合同", "default_roles": ["PM"], }, # 费用合同管理 (fees_contracts) "fees_contracts:create": { "module": "fees", "action": "write", "description": "创建费用合同", "default_roles": ["PM"], }, "fees_contracts:list": { "module": "fees", "action": "read", "description": "查询费用合同列表", "default_roles": ["PM", "CRA", "IMP"], }, "fees_contracts:read": { "module": "fees", "action": "read", "description": "查询费用合同详情", "default_roles": ["PM", "CRA", "IMP"], }, "fees_contracts:update": { "module": "fees", "action": "write", "description": "更新费用合同", "default_roles": ["PM"], }, "fees_contracts:delete": { "module": "fees", "action": "write", "description": "删除费用合同", "default_roles": ["PM"], }, "fees_payments:create": { "module": "fees", "action": "write", "description": "创建费用分期", "default_roles": ["PM"], }, "fees_payments:update": { "module": "fees", "action": "write", "description": "更新费用分期", "default_roles": ["PM"], }, "fees_payments:delete": { "module": "fees", "action": "write", "description": "删除费用分期", "default_roles": ["PM"], }, # 项目成员管理 "project_members:create": { "module": "project_members", "action": "write", "description": "添加项目成员", "default_roles": ["PM"], }, "project_members:list": { "module": "project_members", "action": "read", "description": "查询项目成员列表", "default_roles": ["PM"], }, "project_members:candidates": { "module": "project_members", "action": "read", "description": "查询项目成员候选人", "default_roles": ["PM"], }, "project_members:update": { "module": "project_members", "action": "write", "description": "更新项目成员", "default_roles": ["PM"], }, "project_members:delete": { "module": "project_members", "action": "write", "description": "删除项目成员", "default_roles": ["PM"], }, # 中心管理 "sites:create": { "module": "sites", "action": "write", "description": "创建中心", "default_roles": ["PM"], }, "sites:list": { "module": "sites", "action": "read", "description": "查询中心列表", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP", "QA"], }, "sites:read": { "module": "sites", "action": "read", "description": "查询中心详情", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP", "QA"], }, "sites:update": { "module": "sites", "action": "write", "description": "更新中心", "default_roles": ["PM"], }, "sites:delete": { "module": "sites", "action": "write", "description": "删除中心", "default_roles": ["PM"], }, # 伦理审批管理 "ethics:create": { "module": "startup_ethics", "action": "write", "description": "创建伦理审批", "default_roles": ["PM"], }, "ethics:list": { "module": "startup_ethics", "action": "read", "description": "查询伦理审批列表", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"], }, "ethics:read": { "module": "startup_ethics", "action": "read", "description": "查询伦理审批详情", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"], }, "ethics:update": { "module": "startup_ethics", "action": "write", "description": "更新伦理审批", "default_roles": ["PM"], }, "ethics:delete": { "module": "startup_ethics", "action": "write", "description": "删除伦理审批", "default_roles": ["PM"], }, # 可行性评估管理 "feasibility:create": { "module": "startup_ethics", "action": "write", "description": "创建可行性评估", "default_roles": ["PM"], }, "feasibility:list": { "module": "startup_ethics", "action": "read", "description": "查询可行性评估列表", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"], }, "feasibility:read": { "module": "startup_ethics", "action": "read", "description": "查询可行性评估详情", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"], }, "feasibility:update": { "module": "startup_ethics", "action": "write", "description": "更新可行性评估", "default_roles": ["PM"], }, "feasibility:delete": { "module": "startup_ethics", "action": "write", "description": "删除可行性评估", "default_roles": ["PM"], }, # 预算评估管理 "budget:create": { "module": "startup_auth", "action": "write", "description": "创建预算评估", "default_roles": ["PM"], }, "budget:list": { "module": "startup_auth", "action": "read", "description": "查询预算评估列表", "default_roles": ["PM", "CRA", "IMP"], }, "budget:read": { "module": "startup_auth", "action": "read", "description": "查询预算评估详情", "default_roles": ["PM", "CRA", "IMP"], }, "budget:update": { "module": "startup_auth", "action": "write", "description": "更新预算评估", "default_roles": ["PM"], }, "budget:delete": { "module": "startup_auth", "action": "write", "description": "删除预算评估", "default_roles": ["PM"], }, # 时间表管理 "timeline:create": { "module": "startup_auth", "action": "write", "description": "创建时间表", "default_roles": ["PM"], }, "timeline:list": { "module": "startup_auth", "action": "read", "description": "查询时间表列表", "default_roles": ["PM", "CRA", "PV"], }, "timeline:read": { "module": "startup_auth", "action": "read", "description": "查询时间表详情", "default_roles": ["PM", "CRA", "PV"], }, "timeline:update": { "module": "startup_auth", "action": "write", "description": "更新时间表", "default_roles": ["PM"], }, "timeline:delete": { "module": "startup_auth", "action": "write", "description": "删除时间表", "default_roles": ["PM"], }, # 项目权限管理 "permissions:read": { "module": "project_members", "action": "read", "description": "查询项目权限矩阵", "default_roles": ["PM"], }, "permissions:update": { "module": "project_members", "action": "write", "description": "更新项目权限矩阵", "default_roles": ["PM"], }, # 项目概览 "overview:read": { "module": "project_overview", "action": "read", "description": "查询项目概览", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP", "QA"], }, # 监查问题管理 "monitoring_issues:create": { "module": "monitoring_audit", "action": "write", "description": "创建监查问题", "default_roles": ["PM", "CRA"], }, "monitoring_issues:list": { "module": "monitoring_audit", "action": "read", "description": "查询监查问题列表", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"], }, "monitoring_issues:read": { "module": "monitoring_audit", "action": "read", "description": "查询监查问题详情", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"], }, "monitoring_issues:update": { "module": "monitoring_audit", "action": "write", "description": "更新监查问题", "default_roles": ["PM", "CRA"], }, "monitoring_issues:delete": { "module": "monitoring_audit", "action": "write", "description": "删除监查问题", "default_roles": ["PM"], }, "monitoring_issues:close": { "module": "monitoring_audit", "action": "write", "description": "关闭监查问题", "default_roles": ["PM", "CRA"], }, "monitoring_issues:history": { "module": "monitoring_audit", "action": "read", "description": "查询监查问题历史", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"], }, # 药物发货管理 "drug_shipments:create": { "module": "materials", "action": "write", "description": "创建药物发货", "default_roles": ["PM", "IMP"], }, "drug_shipments:list": { "module": "materials", "action": "read", "description": "查询药物发货列表", "default_roles": ["PM", "CRA", "IMP", "QA"], }, "drug_shipments:read": { "module": "materials", "action": "read", "description": "查询药物发货详情", "default_roles": ["PM", "CRA", "IMP", "QA"], }, "drug_shipments:update": { "module": "materials", "action": "write", "description": "更新药物发货", "default_roles": ["PM", "IMP"], }, "drug_shipments:delete": { "module": "materials", "action": "write", "description": "删除药物发货", "default_roles": ["PM"], }, # 物资管理 "materials:create": { "module": "materials", "action": "write", "description": "创建物资", "default_roles": ["PM", "IMP"], }, "materials:list": { "module": "materials", "action": "read", "description": "查询物资列表", "default_roles": ["PM", "CRA", "IMP", "QA"], }, "materials:read": { "module": "materials", "action": "read", "description": "查询物资详情", "default_roles": ["PM", "CRA", "IMP", "QA"], }, "materials:update": { "module": "materials", "action": "write", "description": "更新物资", "default_roles": ["PM", "IMP"], }, "materials:delete": { "module": "materials", "action": "write", "description": "删除物资", "default_roles": ["PM"], }, # 参与者PDS管理 "subject_pds:create": { "module": "subjects", "action": "write", "description": "创建参与者PDS", "default_roles": ["PM", "CRA"], }, "subject_pds:list": { "module": "subjects", "action": "read", "description": "查询参与者PDS列表", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"], }, "subject_pds:read": { "module": "subjects", "action": "read", "description": "查询参与者PDS详情", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"], }, "subject_pds:update": { "module": "subjects", "action": "write", "description": "更新参与者PDS", "default_roles": ["PM", "CRA"], }, # 审计日志管理 "audit_logs:list": { "module": "audit_export", "action": "read", "description": "查询审计日志列表", "default_roles": ["PM", "QA"], }, "audit_logs:read": { "module": "audit_export", "action": "read", "description": "查询审计日志详情", "default_roles": ["PM", "QA"], }, "audit_logs:export": { "module": "audit_export", "action": "read", "description": "导出审计日志", "default_roles": ["PM", "QA"], }, # 知识库笔记管理 "knowledge_notes:create": { "module": "shared_library", "action": "write", "description": "创建知识库笔记", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"], }, "knowledge_notes:list": { "module": "shared_library", "action": "read", "description": "查询知识库笔记列表", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP", "QA"], }, "knowledge_notes:read": { "module": "shared_library", "action": "read", "description": "查询知识库笔记详情", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP", "QA"], }, "knowledge_notes:update": { "module": "shared_library", "action": "write", "description": "更新知识库笔记", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"], }, "knowledge_notes:delete": { "module": "shared_library", "action": "write", "description": "删除知识库笔记", "default_roles": ["PM"], }, # 参与者历史管理 "subject_history:list": { "module": "subjects", "action": "read", "description": "查询参与者历史列表", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"], }, "subject_history:read": { "module": "subjects", "action": "read", "description": "查询参与者历史详情", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"], }, "subject_history:timeline": { "module": "subjects", "action": "read", "description": "查询参与者历史时间线", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"], }, "subject_history:export": { "module": "subjects", "action": "read", "description": "导出参与者历史", "default_roles": ["PM", "CRA"], }, "subject_history:search": { "module": "subjects", "action": "read", "description": "搜索参与者历史", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"], }, # 项目里程碑管理 "milestones:list": { "module": "project_milestones", "action": "read", "description": "查询项目里程碑列表", "default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP", "QA"], }, "milestones:update": { "module": "project_milestones", "action": "write", "description": "更新项目里程碑", "default_roles": ["PM"], }, } # 向后兼容：业务操作名到接口级权限的映射 # 用于在接口级权限未配置时，回退到模块级权限 OPERATION_TO_ENDPOINTS: dict[str, dict[str, list[str]]] = { "subjects": { "read": [ "subjects:list", "subjects:read", ], "write": [ "subjects:create", "subjects:update", "subjects:delete", ], }, "visits": { "read": [ "visits:list", "visits:read", ], "write": [ "visits:create", "visits:update", "visits:delete", ], }, "risk_issues": { "read": [ "risk_issues:list", "risk_issues:read", ], "write": [ "risk_issues:create", "risk_issues:update", "risk_issues:delete", ], }, "fees": { "read": [ "fees_contracts:list", "fees_contracts:read", "finance_contracts:list", "finance_contracts:read", ], "write": [ "fees_contracts:create", "fees_contracts:update", "fees_contracts:delete", "fees_payments:create", "fees_payments:update", "fees_payments:delete", "finance_contracts:create", "finance_contracts:update", "finance_contracts:delete", ], }, "project_members": { "read": [ "project_members:list", "project_members:candidates", ], "write": [ "project_members:create", "project_members:update", "project_members:delete", ], }, "sites": { "read": [ "sites:list", "sites:read", ], "write": [ "sites:create", "sites:update", "sites:delete", ], }, "startup_ethics": { "read": [ "ethics:list", "ethics:read", "feasibility:list", "feasibility:read", ], "write": [ "ethics:create", "ethics:update", "ethics:delete", "feasibility:create", "feasibility:update", "feasibility:delete", ], }, "startup_auth": { "read": [ "budget:list", "budget:read", "timeline:list", "timeline:read", ], "write": [ "budget:create", "budget:update", "budget:delete", "timeline:create", "timeline:update", "timeline:delete", ], }, "project_overview": { "read": [ "overview:read", ], "write": [], }, "monitoring_audit": { "read": [ "monitoring_issues:list", "monitoring_issues:read", "monitoring_issues:history", ], "write": [ "monitoring_issues:create", "monitoring_issues:update", "monitoring_issues:delete", "monitoring_issues:close", ], }, "materials": { "read": [ "drug_shipments:list", "drug_shipments:read", "materials:list", "materials:read", ], "write": [ "drug_shipments:create", "drug_shipments:update", "drug_shipments:delete", "materials:create", "materials:update", "materials:delete", ], }, "audit_export": { "read": [ "audit_logs:list", "audit_logs:read", "audit_logs:export", ], "write": [], }, "shared_library": { "read": [ "knowledge_notes:list", "knowledge_notes:read", ], "write": [ "knowledge_notes:create", "knowledge_notes:update", "knowledge_notes:delete", ], }, "project_milestones": { "read": [ "milestones:list", ], "write": [ "milestones:update", ], }, } # 项目级权限角色列表 PROJECT_PERMISSION_ROLES = ["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP", "QA"]