20ce6bccef
后端: - 删除 StudyRolePermission 模型和 project_permissions API 文件 - 重写 project_permissions.py core,移除所有模块级权限函数 - 重写 permission_cache.py,移除模块级权限缓存逻辑 - 新增权限模板功能(PermissionTemplate 模型、API、服务层) - 新增 permission_templates 数据库迁移 - 迁移 8 个模块(attachments、audit_logs、dashboard、faqs、 faq_categories、fees_attachments、knowledge_notes、 material_equipments、overview、subject_histories、subject_pds) 至接口级权限检查 - 删除所有模块级权限相关测试文件,新增权限模板测试 前端: - 删除 ProjectPermissions.vue 和 ProjectPermissionsModule.vue - 重写 projectRoutePermissions.ts,改为基于接口级权限格式 - 更新 store/study.ts、router/index.ts、AuditLogs.vue、Projects.vue 中的权限 API 调用,从 fetchProjectRolePermissions 改为 fetchApiEndpointPermissions - 清理 types/api.ts 中的旧模块级权限类型定义 - 新增 PermissionTemplateSelector.vue 组件 - 更新权限管理页面,移除模块级权限 tab Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
70 lines
1.9 KiB
Python
70 lines
1.9 KiB
Python
from datetime import datetime
|
|
from enum import Enum
|
|
from typing import Optional
|
|
from uuid import UUID
|
|
|
|
from pydantic import BaseModel, Field
|
|
|
|
|
|
class TemplateType(str, Enum):
|
|
ROLE = "ROLE"
|
|
SCENARIO = "SCENARIO"
|
|
CUSTOM = "CUSTOM"
|
|
|
|
|
|
class PermissionTemplateVersionRead(BaseModel):
|
|
id: UUID
|
|
version: int
|
|
change_log: Optional[str] = None
|
|
created_at: datetime
|
|
|
|
|
|
class PermissionTemplateCreate(BaseModel):
|
|
name: str = Field(..., min_length=1, max_length=100)
|
|
description: Optional[str] = Field(None, max_length=500)
|
|
template_type: TemplateType
|
|
permissions: dict # {role: {endpoint_key: allowed}}
|
|
tags: Optional[str] = Field(None, max_length=200)
|
|
category: Optional[str] = Field(None, max_length=50)
|
|
recommended_roles: Optional[str] = Field(None, max_length=200)
|
|
|
|
|
|
class PermissionTemplateUpdate(BaseModel):
|
|
name: Optional[str] = Field(None, min_length=1, max_length=100)
|
|
description: Optional[str] = Field(None, max_length=500)
|
|
permissions: Optional[dict] = None
|
|
tags: Optional[str] = Field(None, max_length=200)
|
|
category: Optional[str] = Field(None, max_length=50)
|
|
recommended_roles: Optional[str] = Field(None, max_length=200)
|
|
|
|
|
|
class PermissionTemplateRead(BaseModel):
|
|
id: UUID
|
|
name: str
|
|
description: Optional[str] = None
|
|
template_type: TemplateType
|
|
is_system: bool
|
|
created_by: Optional[UUID] = None
|
|
created_at: datetime
|
|
updated_at: datetime
|
|
permissions: dict
|
|
tags: Optional[str] = None
|
|
category: Optional[str] = None
|
|
recommended_roles: Optional[str] = None
|
|
versions: list[PermissionTemplateVersionRead] = []
|
|
|
|
class Config:
|
|
from_attributes = True
|
|
|
|
|
|
class ApplyTemplateRequest(BaseModel):
|
|
template_id: UUID
|
|
roles: Optional[list[str]] = None
|
|
override: bool = True
|
|
|
|
|
|
class ApplyTemplateResponse(BaseModel):
|
|
study_id: UUID
|
|
applied_roles: list[str]
|
|
permissions: dict
|