feat(audit): F1+F2 告警静默规则标记完成 + 审计日志CSV导出实现
F1 告警静默规则 [done]: - 后端 alert_silence.go: CRUD + Toggle (onetime/daily/weekly 三模式) - 告警引擎 isSilenced 集成 (alert_engine.go) - 前端 SilenceRuleTab + SilenceDialog - 路由 /alerts/silences 已注册 F2 审计日志导出 [done]: - 重写 ExportAuditLogs: 真正的 CSV 导出 (encoding/csv + UTF-8 BOM) - 支持 module/action/username/startTime/endTime 筛选 - 导出限制 10000 条防溢出，自动记录审计日志 - JSON 格式向后兼容 (format=json) - 前端 exportLogs 传递查询参数 同时包含累积的前期工作: - 目录重构 internal/ -> controller/model/router (v0.55-v0.57) - 后端分层架构 dto/repository/service/utils - 审计模块全功能 (终端审计/操作审计/登录日志) - asciicast v2 录制格式 - SFTP 文件浏览器 - StatStrip 紧凑统计条 - 在线会话自动刷新 - LiveMonitor WebSocket 诊断修复 验证: go build ✅ | npm run build ✅ | Docker 部署 ✅ | 10 回归端点 ✅ | CSV 导出 ✅ | 静默 CRUD ✅
This commit is contained in:
attacker committed
1 parent
e57718998a
commit
77c234b060
314 files changed
+10050
-4065
No files matched your search
@@ -0,0 +1,201 @@
|
||||
package controller
|
||||
|
||||
import (
|
||||
"net/http"
|
||||
"strconv"
|
||||
|
||||
"ezops/model"
|
||||
|
||||
"github.com/gin-gonic/gin"
|
||||
"gorm.io/gorm"
|
||||
)
|
||||
|
||||
// ItemRoleHandler Item Role handler (Jenkins-style regex pipeline matching)
|
||||
type ItemRoleHandler struct {
|
||||
db *gorm.DB
|
||||
}
|
||||
|
||||
// NewItemRoleHandler creates a new ItemRoleHandler
|
||||
func NewItemRoleHandler(db *gorm.DB) *ItemRoleHandler {
|
||||
return &ItemRoleHandler{db: db}
|
||||
}
|
||||
|
||||
// ListItemRoles GET /admin/item-roles
|
||||
func (h *ItemRoleHandler) ListItemRoles(c *gin.Context) {
|
||||
var roles []model.ItemRole
|
||||
h.db.Order("created_at DESC").Find(&roles)
|
||||
c.JSON(http.StatusOK, model.Response{
|
||||
Code: 200,
|
||||
Data: model.ListResponse{List: roles, Total: int64(len(roles))},
|
||||
})
|
||||
}
|
||||
|
||||
// CreateItemRole POST /admin/item-roles
|
||||
func (h *ItemRoleHandler) CreateItemRole(c *gin.Context) {
|
||||
var req model.CreateItemRoleRequest
|
||||
if err := c.ShouldBindJSON(&req); err != nil {
|
||||
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "请求参数错误: " + err.Error()})
|
||||
return
|
||||
}
|
||||
|
||||
// 唯一性校验
|
||||
var existing model.ItemRole
|
||||
if err := h.db.Where("name = ? OR code = ?", req.Name, req.Code).First(&existing).Error; err == nil {
|
||||
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "Item Role 名称或编码已存在"})
|
||||
return
|
||||
}
|
||||
|
||||
role := model.ItemRole{
|
||||
Name: req.Name,
|
||||
Code: req.Code,
|
||||
Pattern: req.Pattern,
|
||||
Role: req.Role,
|
||||
Description: req.Description,
|
||||
Status: 1,
|
||||
}
|
||||
if err := h.db.Create(&role).Error; err != nil {
|
||||
c.JSON(http.StatusInternalServerError, model.Response{Code: 500, Message: "创建失败"})
|
||||
return
|
||||
}
|
||||
|
||||
c.JSON(http.StatusOK, model.Response{Code: 200, Message: "创建成功", Data: role})
|
||||
}
|
||||
|
||||
// UpdateItemRole PUT /admin/item-roles/:id
|
||||
func (h *ItemRoleHandler) UpdateItemRole(c *gin.Context) {
|
||||
id, err := strconv.Atoi(c.Param("id"))
|
||||
if err != nil {
|
||||
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "无效的 ID"})
|
||||
return
|
||||
}
|
||||
|
||||
var req model.UpdateItemRoleRequest
|
||||
if err := c.ShouldBindJSON(&req); err != nil {
|
||||
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "请求参数错误: " + err.Error()})
|
||||
return
|
||||
}
|
||||
|
||||
var role model.ItemRole
|
||||
if err := h.db.First(&role, id).Error; err != nil {
|
||||
c.JSON(http.StatusNotFound, model.Response{Code: 404, Message: "Item Role 不存在"})
|
||||
return
|
||||
}
|
||||
|
||||
updates := map[string]interface{}{}
|
||||
if req.Name != "" {
|
||||
updates["name"] = req.Name
|
||||
}
|
||||
if req.Code != "" {
|
||||
updates["code"] = req.Code
|
||||
}
|
||||
if req.Pattern != "" {
|
||||
updates["pattern"] = req.Pattern
|
||||
}
|
||||
if req.Role != "" {
|
||||
updates["role"] = req.Role
|
||||
}
|
||||
if req.Description != "" {
|
||||
updates["description"] = req.Description
|
||||
}
|
||||
if req.Status != nil {
|
||||
updates["status"] = *req.Status
|
||||
}
|
||||
|
||||
if len(updates) > 0 {
|
||||
if err := h.db.Model(&role).Updates(updates).Error; err != nil {
|
||||
c.JSON(http.StatusInternalServerError, model.Response{Code: 500, Message: "更新失败"})
|
||||
return
|
||||
}
|
||||
}
|
||||
|
||||
h.db.First(&role, id)
|
||||
c.JSON(http.StatusOK, model.Response{Code: 200, Message: "更新成功", Data: role})
|
||||
}
|
||||
|
||||
// DeleteItemRole DELETE /admin/item-roles/:id
|
||||
func (h *ItemRoleHandler) DeleteItemRole(c *gin.Context) {
|
||||
id, err := strconv.Atoi(c.Param("id"))
|
||||
if err != nil {
|
||||
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "无效的 ID"})
|
||||
return
|
||||
}
|
||||
|
||||
// Clean up user associations first
|
||||
h.db.Where("item_role_id = ?", id).Delete(&model.UserItemRole{})
|
||||
if err := h.db.Delete(&model.ItemRole{}, id).Error; err != nil {
|
||||
c.JSON(http.StatusInternalServerError, model.Response{Code: 500, Message: "删除失败"})
|
||||
return
|
||||
}
|
||||
|
||||
c.JSON(http.StatusOK, model.Response{Code: 200, Message: "删除成功"})
|
||||
}
|
||||
|
||||
// ListUserItemRoles GET /admin/users/:id/item-roles
|
||||
func (h *ItemRoleHandler) ListUserItemRoles(c *gin.Context) {
|
||||
userID, err := strconv.Atoi(c.Param("id"))
|
||||
if err != nil {
|
||||
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "无效的用户 ID"})
|
||||
return
|
||||
}
|
||||
|
||||
var assignments []model.UserItemRole
|
||||
h.db.Preload("ItemRole").Where("user_id = ?", userID).Find(&assignments)
|
||||
c.JSON(http.StatusOK, model.Response{
|
||||
Code: 200,
|
||||
Data: model.ListResponse{List: assignments, Total: int64(len(assignments))},
|
||||
})
|
||||
}
|
||||
|
||||
// AssignItemRole POST /admin/users/:id/item-roles
|
||||
func (h *ItemRoleHandler) AssignItemRole(c *gin.Context) {
|
||||
userID, err := strconv.Atoi(c.Param("id"))
|
||||
if err != nil {
|
||||
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "无效的用户 ID"})
|
||||
return
|
||||
}
|
||||
|
||||
var req model.AssignItemRoleRequest
|
||||
if err := c.ShouldBindJSON(&req); err != nil {
|
||||
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "请求参数错误: " + err.Error()})
|
||||
return
|
||||
}
|
||||
|
||||
// Check if already assigned
|
||||
var existing model.UserItemRole
|
||||
if err := h.db.Where("user_id = ? AND item_role_id = ?", userID, req.ItemRoleID).First(&existing).Error; err == nil {
|
||||
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "该用户已拥有此 Item Role"})
|
||||
return
|
||||
}
|
||||
|
||||
assignment := model.UserItemRole{
|
||||
UserID: uint(userID),
|
||||
ItemRoleID: req.ItemRoleID,
|
||||
}
|
||||
if err := h.db.Create(&assignment).Error; err != nil {
|
||||
c.JSON(http.StatusInternalServerError, model.Response{Code: 500, Message: "分配失败"})
|
||||
return
|
||||
}
|
||||
|
||||
c.JSON(http.StatusOK, model.Response{Code: 200, Message: "分配成功", Data: assignment})
|
||||
}
|
||||
|
||||
// RemoveItemRole DELETE /admin/users/:id/item-roles/:roleId
|
||||
func (h *ItemRoleHandler) RemoveItemRole(c *gin.Context) {
|
||||
userID, err := strconv.Atoi(c.Param("id"))
|
||||
if err != nil {
|
||||
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "无效的用户 ID"})
|
||||
return
|
||||
}
|
||||
roleID, err := strconv.Atoi(c.Param("roleId"))
|
||||
if err != nil {
|
||||
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "无效的 Role ID"})
|
||||
return
|
||||
}
|
||||
|
||||
if err := h.db.Where("user_id = ? AND item_role_id = ?", uint(userID), roleID).Delete(&model.UserItemRole{}).Error; err != nil {
|
||||
c.JSON(http.StatusInternalServerError, model.Response{Code: 500, Message: "移除失败"})
|
||||
return
|
||||
}
|
||||
|
||||
c.JSON(http.StatusOK, model.Response{Code: 200, Message: "移除成功"})
|
||||
}
|
||||
Reference in new issue
Block a user