Cheng Zhou
89cecce6b5
新增 MEDICAL_REVIEW 项目角色，界面显示为医学审核，并通过 Alembic 迁移扩展 user_role 枚举。 为医学审核配置独立默认权限：项目总览、参与者、风险问题、监查稽查、FAQ、共享库按医学审核职责开放，不再复制 PV 默认权限。 同步前后端类型、项目成员角色下拉、权限矩阵展示、文件分发角色兜底和用户协议文案，并补充权限矩阵回归测试。
113 lines
2.9 KiB
Python
113 lines
2.9 KiB
Python
import re
|
|
import uuid
|
|
from datetime import datetime
|
|
from typing import Literal, Optional
|
|
|
|
from pydantic import BaseModel, ConfigDict, EmailStr, Field, field_validator
|
|
|
|
UserRole = Literal["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP", "QA", "ADMIN"]
|
|
RegisterRole = Literal["PM", "CRA", "PV", "MEDICAL_REVIEW", "IMP"]
|
|
UserStatus = Literal["PENDING", "ACTIVE", "REJECTED", "DISABLED"]
|
|
|
|
PASSWORD_REGEX = re.compile(r"^(?=.*[A-Za-z])(?=.*\d).{8,}$")
|
|
|
|
|
|
class UserDisplay(BaseModel):
|
|
id: uuid.UUID
|
|
email: EmailStr
|
|
full_name: str
|
|
role: UserRole
|
|
avatar_url: Optional[str] = None
|
|
|
|
model_config = ConfigDict(from_attributes=True)
|
|
|
|
|
|
class _PasswordValidator(BaseModel):
|
|
password: Optional[str] = Field(default=None, min_length=8, max_length=72)
|
|
|
|
@field_validator("password")
|
|
@classmethod
|
|
def validate_password_strength(cls, v: Optional[str]) -> Optional[str]:
|
|
if v is None:
|
|
return v
|
|
if not PASSWORD_REGEX.match(v):
|
|
raise ValueError("密码需至少 8 位且包含字母和数字")
|
|
return v
|
|
|
|
|
|
class UserRegisterRequest(_PasswordValidator):
|
|
password: str = Field(min_length=8, max_length=72)
|
|
email: EmailStr
|
|
full_name: str = Field(min_length=1)
|
|
role: RegisterRole
|
|
clinical_department: str = Field(min_length=1)
|
|
|
|
|
|
class UserCreate(_PasswordValidator):
|
|
password: str = Field(min_length=8, max_length=72)
|
|
email: EmailStr
|
|
full_name: str = Field(min_length=1)
|
|
role: UserRole
|
|
clinical_department: str = Field(min_length=1)
|
|
status: UserStatus = "ACTIVE"
|
|
|
|
|
|
class UserRead(BaseModel):
|
|
id: uuid.UUID
|
|
email: EmailStr
|
|
username: str
|
|
full_name: str
|
|
role: UserRole
|
|
clinical_department: str
|
|
status: UserStatus
|
|
is_active: bool
|
|
created_at: datetime
|
|
approved_at: Optional[datetime] = None
|
|
approved_by: Optional[uuid.UUID] = None
|
|
avatar_url: Optional[str] = None
|
|
|
|
model_config = ConfigDict(from_attributes=True)
|
|
|
|
|
|
class UserUpdate(_PasswordValidator):
|
|
email: Optional[EmailStr] = None
|
|
full_name: Optional[str] = None
|
|
role: Optional[UserRole] = None
|
|
clinical_department: Optional[str] = None
|
|
status: Optional[UserStatus] = None
|
|
password: Optional[str] = None
|
|
is_active: Optional[bool] = None
|
|
avatar_url: Optional[str] = None
|
|
|
|
|
|
class UserResponse(UserRead):
|
|
pass
|
|
|
|
|
|
class UserAdminReviewRequest(BaseModel):
|
|
action: Literal["approve", "reject"]
|
|
|
|
|
|
class AdminUserListResponse(BaseModel):
|
|
items: list[UserResponse]
|
|
total: int
|
|
|
|
|
|
class UserSelfUpdate(_PasswordValidator):
|
|
full_name: Optional[str] = None
|
|
clinical_department: Optional[str] = None
|
|
password: Optional[str] = None
|
|
current_password: Optional[str] = None
|
|
avatar_url: Optional[str] = None
|
|
|
|
|
|
class Token(BaseModel):
|
|
access_token: str
|
|
token_type: str = "bearer"
|
|
|
|
|
|
class TokenPayload(BaseModel):
|
|
sub: uuid.UUID
|
|
role: str
|
|
exp: Optional[int] = None
|