zhouchengcheng/ctms
1
1
Fork 0
Code Issues Pull Requests 2 Actions Packages Projects Releases Wiki Activity
Files
5327e00cf11e8e13eae62a4111893f5b44b637a2
ctms/backend/app/core/api_permissions.py
T
Cheng Zhou 5327e00cf1 将接口级权限改为业务语言 
1. 更新权限配置格式
   - 从 "METHOD:/path" 改为 "module:operation"
   - 例如: "subjects:create", "visits:update", "risk_issues:delete"
   - 更易理解和管理

2. 新增权限操作列表 API
   - GET /api/v1/api-permissions/operations
   - 返回所有权限操作及其描述

3. 更新前端权限管理界面
   - 显示业务语言的权限名称
   - 按模块和操作类型筛选
   - 改进用户体验

4. 修复导入错误
   - 更新 MODULE_TO_ENDPOINTS 为 OPERATION_TO_ENDPOINTS
   - 禁用 API 端点注册表初始化

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
2026-05-14 11:00:41 +08:00

791 lines
23 KiB
Python
Raw Blame History

"""接口级权限配置
定义系统中所有API端点的权限配置，支持细粒度的接口级权限控制。
"""
from __future__ import annotations
# 接口级权限配置
# 格式: "业务操作名": {配置信息}
API_ENDPOINT_PERMISSIONS = {
# 参与者管理 (subjects)
"subjects:create": {
"module": "subjects",
"action": "write",
"description": "创建参与者",
"default_roles": ["PM", "CRA"],
},
"subjects:list": {
"module": "subjects",
"action": "read",
"description": "查询参与者列表",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP", "QA"],
},
"subjects:read": {
"module": "subjects",
"action": "read",
"description": "查询参与者详情",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP", "QA"],
},
"subjects:update": {
"module": "subjects",
"action": "write",
"description": "更新参与者",
"default_roles": ["PM", "CRA"],
},
"subjects:delete": {
"module": "subjects",
"action": "write",
"description": "删除参与者",
"default_roles": ["PM"],
},
# 访视管理 (visits)
"visits:create": {
"module": "subjects",
"action": "write",
"description": "创建访视",
"default_roles": ["PM", "CRA"],
},
"visits:list": {
"module": "subjects",
"action": "read",
"description": "查询访视列表",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP", "QA"],
},
"visits:read": {
"module": "subjects",
"action": "read",
"description": "查询访视详情",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP", "QA"],
},
"visits:update": {
"module": "subjects",
"action": "write",
"description": "更新访视",
"default_roles": ["PM", "CRA"],
},
"visits:delete": {
"module": "subjects",
"action": "write",
"description": "删除访视",
"default_roles": ["PM"],
},
# 不良事件 (risk_issues)
"risk_issues:create": {
"module": "risk_issues",
"action": "write",
"description": "创建不良事件",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"],
},
"risk_issues:list": {
"module": "risk_issues",
"action": "read",
"description": "查询不良事件列表",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP", "QA"],
},
"risk_issues:read": {
"module": "risk_issues",
"action": "read",
"description": "查询不良事件详情",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP", "QA"],
},
"risk_issues:update": {
"module": "risk_issues",
"action": "write",
"description": "更新不良事件",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"],
},
"risk_issues:delete": {
"module": "risk_issues",
"action": "write",
"description": "删除不良事件",
"default_roles": ["PM"],
},
# 财务合同管理 (finance_contracts)
"finance_contracts:create": {
"module": "fees",
"action": "write",
"description": "创建财务合同",
"default_roles": ["PM"],
},
"finance_contracts:list": {
"module": "fees",
"action": "read",
"description": "查询财务合同列表",
"default_roles": ["PM", "CRA", "IMP"],
},
"finance_contracts:read": {
"module": "fees",
"action": "read",
"description": "查询财务合同详情",
"default_roles": ["PM", "CRA", "IMP"],
},
"finance_contracts:update": {
"module": "fees",
"action": "write",
"description": "更新财务合同",
"default_roles": ["PM"],
},
"finance_contracts:delete": {
"module": "fees",
"action": "write",
"description": "删除财务合同",
"default_roles": ["PM"],
},
# 费用合同管理 (fees_contracts)
"fees_contracts:create": {
"module": "fees",
"action": "write",
"description": "创建费用合同",
"default_roles": ["PM"],
},
"fees_contracts:list": {
"module": "fees",
"action": "read",
"description": "查询费用合同列表",
"default_roles": ["PM", "CRA", "IMP"],
},
"fees_contracts:read": {
"module": "fees",
"action": "read",
"description": "查询费用合同详情",
"default_roles": ["PM", "CRA", "IMP"],
},
"fees_contracts:update": {
"module": "fees",
"action": "write",
"description": "更新费用合同",
"default_roles": ["PM"],
},
"fees_contracts:delete": {
"module": "fees",
"action": "write",
"description": "删除费用合同",
"default_roles": ["PM"],
},
"fees_payments:create": {
"module": "fees",
"action": "write",
"description": "创建费用分期",
"default_roles": ["PM"],
},
"fees_payments:update": {
"module": "fees",
"action": "write",
"description": "更新费用分期",
"default_roles": ["PM"],
},
"fees_payments:delete": {
"module": "fees",
"action": "write",
"description": "删除费用分期",
"default_roles": ["PM"],
},
# 项目成员管理
"project_members:create": {
"module": "project_members",
"action": "write",
"description": "添加项目成员",
"default_roles": ["PM"],
},
"project_members:list": {
"module": "project_members",
"action": "read",
"description": "查询项目成员列表",
"default_roles": ["PM"],
},
"project_members:candidates": {
"module": "project_members",
"action": "read",
"description": "查询项目成员候选人",
"default_roles": ["PM"],
},
"project_members:update": {
"module": "project_members",
"action": "write",
"description": "更新项目成员",
"default_roles": ["PM"],
},
"project_members:delete": {
"module": "project_members",
"action": "write",
"description": "删除项目成员",
"default_roles": ["PM"],
},
# 中心管理
"sites:create": {
"module": "sites",
"action": "write",
"description": "创建中心",
"default_roles": ["PM"],
},
"sites:list": {
"module": "sites",
"action": "read",
"description": "查询中心列表",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP", "QA"],
},
"sites:read": {
"module": "sites",
"action": "read",
"description": "查询中心详情",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP", "QA"],
},
"sites:update": {
"module": "sites",
"action": "write",
"description": "更新中心",
"default_roles": ["PM"],
},
"sites:delete": {
"module": "sites",
"action": "write",
"description": "删除中心",
"default_roles": ["PM"],
},
# 伦理审批管理
"ethics:create": {
"module": "startup_ethics",
"action": "write",
"description": "创建伦理审批",
"default_roles": ["PM"],
},
"ethics:list": {
"module": "startup_ethics",
"action": "read",
"description": "查询伦理审批列表",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"],
},
"ethics:read": {
"module": "startup_ethics",
"action": "read",
"description": "查询伦理审批详情",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"],
},
"ethics:update": {
"module": "startup_ethics",
"action": "write",
"description": "更新伦理审批",
"default_roles": ["PM"],
},
"ethics:delete": {
"module": "startup_ethics",
"action": "write",
"description": "删除伦理审批",
"default_roles": ["PM"],
},
# 可行性评估管理
"feasibility:create": {
"module": "startup_ethics",
"action": "write",
"description": "创建可行性评估",
"default_roles": ["PM"],
},
"feasibility:list": {
"module": "startup_ethics",
"action": "read",
"description": "查询可行性评估列表",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"],
},
"feasibility:read": {
"module": "startup_ethics",
"action": "read",
"description": "查询可行性评估详情",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"],
},
"feasibility:update": {
"module": "startup_ethics",
"action": "write",
"description": "更新可行性评估",
"default_roles": ["PM"],
},
"feasibility:delete": {
"module": "startup_ethics",
"action": "write",
"description": "删除可行性评估",
"default_roles": ["PM"],
},
# 预算评估管理
"budget:create": {
"module": "startup_auth",
"action": "write",
"description": "创建预算评估",
"default_roles": ["PM"],
},
"budget:list": {
"module": "startup_auth",
"action": "read",
"description": "查询预算评估列表",
"default_roles": ["PM", "CRA", "IMP"],
},
"budget:read": {
"module": "startup_auth",
"action": "read",
"description": "查询预算评估详情",
"default_roles": ["PM", "CRA", "IMP"],
},
"budget:update": {
"module": "startup_auth",
"action": "write",
"description": "更新预算评估",
"default_roles": ["PM"],
},
"budget:delete": {
"module": "startup_auth",
"action": "write",
"description": "删除预算评估",
"default_roles": ["PM"],
},
# 时间表管理
"timeline:create": {
"module": "startup_auth",
"action": "write",
"description": "创建时间表",
"default_roles": ["PM"],
},
"timeline:list": {
"module": "startup_auth",
"action": "read",
"description": "查询时间表列表",
"default_roles": ["PM", "CRA", "PV"],
},
"timeline:read": {
"module": "startup_auth",
"action": "read",
"description": "查询时间表详情",
"default_roles": ["PM", "CRA", "PV"],
},
"timeline:update": {
"module": "startup_auth",
"action": "write",
"description": "更新时间表",
"default_roles": ["PM"],
},
"timeline:delete": {
"module": "startup_auth",
"action": "write",
"description": "删除时间表",
"default_roles": ["PM"],
},
# 项目权限管理
"permissions:read": {
"module": "project_members",
"action": "read",
"description": "查询项目权限矩阵",
"default_roles": ["PM"],
},
"permissions:update": {
"module": "project_members",
"action": "write",
"description": "更新项目权限矩阵",
"default_roles": ["PM"],
},
# 项目概览
"overview:read": {
"module": "project_overview",
"action": "read",
"description": "查询项目概览",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP", "QA"],
},
# 监查问题管理
"monitoring_issues:create": {
"module": "monitoring_audit",
"action": "write",
"description": "创建监查问题",
"default_roles": ["PM", "CRA"],
},
"monitoring_issues:list": {
"module": "monitoring_audit",
"action": "read",
"description": "查询监查问题列表",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"],
},
"monitoring_issues:read": {
"module": "monitoring_audit",
"action": "read",
"description": "查询监查问题详情",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"],
},
"monitoring_issues:update": {
"module": "monitoring_audit",
"action": "write",
"description": "更新监查问题",
"default_roles": ["PM", "CRA"],
},
"monitoring_issues:delete": {
"module": "monitoring_audit",
"action": "write",
"description": "删除监查问题",
"default_roles": ["PM"],
},
"monitoring_issues:close": {
"module": "monitoring_audit",
"action": "write",
"description": "关闭监查问题",
"default_roles": ["PM", "CRA"],
},
"monitoring_issues:history": {
"module": "monitoring_audit",
"action": "read",
"description": "查询监查问题历史",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"],
},
# 药物发货管理
"drug_shipments:create": {
"module": "materials",
"action": "write",
"description": "创建药物发货",
"default_roles": ["PM", "IMP"],
},
"drug_shipments:list": {
"module": "materials",
"action": "read",
"description": "查询药物发货列表",
"default_roles": ["PM", "CRA", "IMP", "QA"],
},
"drug_shipments:read": {
"module": "materials",
"action": "read",
"description": "查询药物发货详情",
"default_roles": ["PM", "CRA", "IMP", "QA"],
},
"drug_shipments:update": {
"module": "materials",
"action": "write",
"description": "更新药物发货",
"default_roles": ["PM", "IMP"],
},
"drug_shipments:delete": {
"module": "materials",
"action": "write",
"description": "删除药物发货",
"default_roles": ["PM"],
},
# 物资管理
"materials:create": {
"module": "materials",
"action": "write",
"description": "创建物资",
"default_roles": ["PM", "IMP"],
},
"materials:list": {
"module": "materials",
"action": "read",
"description": "查询物资列表",
"default_roles": ["PM", "CRA", "IMP", "QA"],
},
"materials:read": {
"module": "materials",
"action": "read",
"description": "查询物资详情",
"default_roles": ["PM", "CRA", "IMP", "QA"],
},
"materials:update": {
"module": "materials",
"action": "write",
"description": "更新物资",
"default_roles": ["PM", "IMP"],
},
"materials:delete": {
"module": "materials",
"action": "write",
"description": "删除物资",
"default_roles": ["PM"],
},
# 参与者PDS管理
"subject_pds:create": {
"module": "subjects",
"action": "write",
"description": "创建参与者PDS",
"default_roles": ["PM", "CRA"],
},
"subject_pds:list": {
"module": "subjects",
"action": "read",
"description": "查询参与者PDS列表",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"],
},
"subject_pds:read": {
"module": "subjects",
"action": "read",
"description": "查询参与者PDS详情",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"],
},
"subject_pds:update": {
"module": "subjects",
"action": "write",
"description": "更新参与者PDS",
"default_roles": ["PM", "CRA"],
},
# 审计日志管理
"audit_logs:list": {
"module": "audit_export",
"action": "read",
"description": "查询审计日志列表",
"default_roles": ["PM", "QA"],
},
"audit_logs:read": {
"module": "audit_export",
"action": "read",
"description": "查询审计日志详情",
"default_roles": ["PM", "QA"],
},
"audit_logs:export": {
"module": "audit_export",
"action": "read",
"description": "导出审计日志",
"default_roles": ["PM", "QA"],
},
# 知识库笔记管理
"knowledge_notes:create": {
"module": "shared_library",
"action": "write",
"description": "创建知识库笔记",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"],
},
"knowledge_notes:list": {
"module": "shared_library",
"action": "read",
"description": "查询知识库笔记列表",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP", "QA"],
},
"knowledge_notes:read": {
"module": "shared_library",
"action": "read",
"description": "查询知识库笔记详情",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP", "QA"],
},
"knowledge_notes:update": {
"module": "shared_library",
"action": "write",
"description": "更新知识库笔记",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"],
},
"knowledge_notes:delete": {
"module": "shared_library",
"action": "write",
"description": "删除知识库笔记",
"default_roles": ["PM"],
},
# 参与者历史管理
"subject_history:list": {
"module": "subjects",
"action": "read",
"description": "查询参与者历史列表",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"],
},
"subject_history:read": {
"module": "subjects",
"action": "read",
"description": "查询参与者历史详情",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"],
},
"subject_history:timeline": {
"module": "subjects",
"action": "read",
"description": "查询参与者历史时间线",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"],
},
"subject_history:export": {
"module": "subjects",
"action": "read",
"description": "导出参与者历史",
"default_roles": ["PM", "CRA"],
},
"subject_history:search": {
"module": "subjects",
"action": "read",
"description": "搜索参与者历史",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW"],
},
# 项目里程碑管理
"milestones:list": {
"module": "project_milestones",
"action": "read",
"description": "查询项目里程碑列表",
"default_roles": ["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP", "QA"],
},
"milestones:update": {
"module": "project_milestones",
"action": "write",
"description": "更新项目里程碑",
"default_roles": ["PM"],
},
}
# 向后兼容：业务操作名到接口级权限的映射
# 用于在接口级权限未配置时，回退到模块级权限
OPERATION_TO_ENDPOINTS: dict[str, dict[str, list[str]]] = {
"subjects": {
"read": [
"subjects:list",
"subjects:read",
],
"write": [
"subjects:create",
"subjects:update",
"subjects:delete",
],
},
"visits": {
"read": [
"visits:list",
"visits:read",
],
"write": [
"visits:create",
"visits:update",
"visits:delete",
],
},
"risk_issues": {
"read": [
"risk_issues:list",
"risk_issues:read",
],
"write": [
"risk_issues:create",
"risk_issues:update",
"risk_issues:delete",
],
},
"fees": {
"read": [
"fees_contracts:list",
"fees_contracts:read",
"finance_contracts:list",
"finance_contracts:read",
],
"write": [
"fees_contracts:create",
"fees_contracts:update",
"fees_contracts:delete",
"fees_payments:create",
"fees_payments:update",
"fees_payments:delete",
"finance_contracts:create",
"finance_contracts:update",
"finance_contracts:delete",
],
},
"project_members": {
"read": [
"project_members:list",
"project_members:candidates",
],
"write": [
"project_members:create",
"project_members:update",
"project_members:delete",
],
},
"sites": {
"read": [
"sites:list",
"sites:read",
],
"write": [
"sites:create",
"sites:update",
"sites:delete",
],
},
"startup_ethics": {
"read": [
"ethics:list",
"ethics:read",
"feasibility:list",
"feasibility:read",
],
"write": [
"ethics:create",
"ethics:update",
"ethics:delete",
"feasibility:create",
"feasibility:update",
"feasibility:delete",
],
},
"startup_auth": {
"read": [
"budget:list",
"budget:read",
"timeline:list",
"timeline:read",
],
"write": [
"budget:create",
"budget:update",
"budget:delete",
"timeline:create",
"timeline:update",
"timeline:delete",
],
},
"project_overview": {
"read": [
"overview:read",
],
"write": [],
},
"monitoring_audit": {
"read": [
"monitoring_issues:list",
"monitoring_issues:read",
"monitoring_issues:history",
],
"write": [
"monitoring_issues:create",
"monitoring_issues:update",
"monitoring_issues:delete",
"monitoring_issues:close",
],
},
"materials": {
"read": [
"drug_shipments:list",
"drug_shipments:read",
"materials:list",
"materials:read",
],
"write": [
"drug_shipments:create",
"drug_shipments:update",
"drug_shipments:delete",
"materials:create",
"materials:update",
"materials:delete",
],
},
"audit_export": {
"read": [
"audit_logs:list",
"audit_logs:read",
"audit_logs:export",
],
"write": [],
},
"shared_library": {
"read": [
"knowledge_notes:list",
"knowledge_notes:read",
],
"write": [
"knowledge_notes:create",
"knowledge_notes:update",
"knowledge_notes:delete",
],
},
"project_milestones": {
"read": [
"milestones:list",
],
"write": [
"milestones:update",
],
},
}
# 项目级权限角色列表
PROJECT_PERMISSION_ROLES = ["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP", "QA"]
Reference in New Issue View Git Blame Copy Permalink