c3a5dc2a41
admin_user 加 pages_override(可空 JSON)+ Alembic 迁移;role=="custom" 时可见页由这份逐页 勾选决定,否则跟随角色。create/update 收 pages_override(切回普通角色自动清空),_validate_role 放行 custom 哨兵角色。登录/me 下发有效页时优先用 override → 左侧导航直接按勾选生效。 补 4 个用例覆盖建/改/切回/切入,test_admin_roles 全绿。 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
42 lines
1.5 KiB
Python
42 lines
1.5 KiB
Python
"""admin 账号管理 + 审计日志 schemas。"""
|
|
from __future__ import annotations
|
|
|
|
from datetime import datetime
|
|
from typing import Literal
|
|
|
|
from pydantic import BaseModel, ConfigDict, Field
|
|
|
|
# 角色不再硬编码枚举:改为任意角色名(自定义角色由 admin_role 表管理),存在性在路由层校验。
|
|
|
|
|
|
class AdminCreateRequest(BaseModel):
|
|
username: str = Field(..., min_length=3, max_length=64)
|
|
password: str = Field(..., min_length=8, max_length=72) # bcrypt ≤72 字节
|
|
role: str = Field("operator", min_length=1, max_length=32)
|
|
# 仅当 role == "custom":这个人专属可见页 key 列表(逐页勾选结果)。其余角色不传/忽略。
|
|
pages_override: list[str] | None = None
|
|
|
|
|
|
class AdminUpdateRequest(BaseModel):
|
|
"""改角色 / 启用禁用 / 重置密码 / 自定义可见页,字段都可选(只改传了的)。"""
|
|
|
|
role: str | None = Field(None, min_length=1, max_length=32)
|
|
status: Literal["active", "disabled"] | None = None
|
|
password: str | None = Field(None, min_length=8, max_length=72)
|
|
# 改成/更新「自定义」可见页;role 切回普通角色时后端会清空 override(见路由)。
|
|
pages_override: list[str] | None = None
|
|
|
|
|
|
class AdminAuditLogOut(BaseModel):
|
|
model_config = ConfigDict(from_attributes=True)
|
|
|
|
id: int
|
|
admin_id: int
|
|
admin_username: str
|
|
action: str
|
|
target_type: str
|
|
target_id: str | None = None
|
|
detail: dict | None = None
|
|
ip: str | None = None
|
|
created_at: datetime
|