sync: 同步 sql-platform-pro 最新代码 — 权限体系安全修复 v0.8.1
- P0: 实例访问控制全线接入权限组 (829测试) - P1: permissions字段激活 + 操作级权限检查 (843测试) - 前端: 删除数据权限页面, 权限组合并为唯一入口 - 新增: CodeMirror编辑器 + 查询模板 + 慢查询分析 - 新增: MongoDB管理页面 + Dashboard增强 - 修复: Pydantic V2迁移 + 前端TS错误修复
This commit is contained in:
logan committed
1 parent
6fcd9465cf
commit
4c9427e546
105 files changed
+23680
-471
No files matched your search
@@ -1,4 +1,12 @@
|
||||
from sqlalchemy import Column, Integer, String, Text, DateTime, func
|
||||
"""Audit log model — 全量操作审计记录。
|
||||
|
||||
记录平台所有操作行为，支持查询和变更的全链路追踪:
|
||||
- 查询操作: 查询内容、数据库类型、执行耗时、结果行数
|
||||
- 变更工单: 工单全生命周期、影响行数、执行结果
|
||||
- 数据源管理: 增删改查
|
||||
- 权限操作: 登录/角色变更
|
||||
"""
|
||||
from sqlalchemy import Column, Integer, String, Text, DateTime, Boolean, func
|
||||
|
||||
from app.core.database import Base
|
||||
|
||||
@@ -7,10 +15,31 @@ class AuditLog(Base):
|
||||
__tablename__ = "audit_logs"
|
||||
|
||||
id = Column(Integer, primary_key=True, autoincrement=True)
|
||||
user_id = Column(Integer, nullable=False)
|
||||
action = Column(String(50), nullable=False)
|
||||
target_type = Column(String(50), nullable=False) # ticket / instance / user / query
|
||||
target_id = Column(Integer, nullable=True)
|
||||
user_id = Column(Integer, nullable=False, index=True)
|
||||
username = Column(String(50), nullable=True)
|
||||
action = Column(String(50), nullable=False, index=True)
|
||||
target_type = Column(String(50), nullable=False, index=True)
|
||||
target_id = Column(Integer, nullable=True, index=True)
|
||||
detail = Column(Text, nullable=True)
|
||||
|
||||
# 数据库操作上下文
|
||||
db_type = Column(String(20), nullable=True, index=True)
|
||||
database_name = Column(String(100), nullable=True)
|
||||
instance_name = Column(String(100), nullable=True)
|
||||
|
||||
# 执行指标
|
||||
execution_time_ms = Column(Integer, nullable=True)
|
||||
rows_affected = Column(Integer, nullable=True)
|
||||
result_status = Column(String(20), nullable=True)
|
||||
|
||||
# 查询内容（SQL/Redis命令/MongoDB操作）
|
||||
query_content = Column(Text, nullable=True)
|
||||
|
||||
# 网络信息
|
||||
ip_address = Column(String(50), nullable=True)
|
||||
created_at = Column(DateTime, server_default=func.now())
|
||||
user_agent = Column(String(200), nullable=True)
|
||||
|
||||
# 是否高风险操作
|
||||
is_risky = Column(Boolean, default=False)
|
||||
|
||||
created_at = Column(DateTime, server_default=func.now(), index=True)
|
||||
@@ -0,0 +1,31 @@
|
||||
"""数据脱敏规则模型 — 定义脱敏规则的存储结构。"""
|
||||
from sqlalchemy import Column, Integer, String, Text, Boolean, DateTime, ForeignKey, func, UniqueConstraint
|
||||
|
||||
from app.core.database import Base
|
||||
|
||||
|
||||
class MaskingRule(Base):
|
||||
"""数据脱敏规则，用于动态脱敏查询结果。
|
||||
|
||||
通过组合 (instance_id, database, table_name, column_name) 唯一确定一条规则。
|
||||
"""
|
||||
|
||||
__tablename__ = "masking_rules"
|
||||
|
||||
id = Column(Integer, primary_key=True, autoincrement=True)
|
||||
instance_id = Column(Integer, ForeignKey("instances.id"), nullable=False)
|
||||
database = Column(String(100), nullable=False)
|
||||
table_name = Column(String(100), nullable=False)
|
||||
column_name = Column(String(100), nullable=False)
|
||||
mask_type = Column(String(30), nullable=False) # full / partial / hash / truncate / regex
|
||||
mask_config = Column(Text, nullable=True) # JSON 配置
|
||||
is_enabled = Column(Boolean, default=True)
|
||||
created_at = Column(DateTime, server_default=func.now())
|
||||
updated_at = Column(DateTime, server_default=func.now(), onupdate=func.now())
|
||||
|
||||
__table_args__ = (
|
||||
UniqueConstraint(
|
||||
"instance_id", "database", "table_name", "column_name",
|
||||
name="uk_masking_rule_col"
|
||||
),
|
||||
)
|
||||
@@ -0,0 +1,18 @@
|
||||
"""通知模板模型。"""
|
||||
from sqlalchemy import Column, Integer, String, Text, Boolean, DateTime, func
|
||||
|
||||
from app.core.database import Base
|
||||
|
||||
|
||||
class NotificationTemplate(Base):
|
||||
"""通知消息模板。"""
|
||||
__tablename__ = "notification_templates"
|
||||
|
||||
id = Column(Integer, primary_key=True, autoincrement=True)
|
||||
name = Column(String(100), nullable=False)
|
||||
event_type = Column(String(50), nullable=False)
|
||||
channel_type = Column(String(30), nullable=False) # dingtalk / feishu / email
|
||||
title_template = Column(Text, nullable=False)
|
||||
body_template = Column(Text, nullable=False)
|
||||
is_enabled = Column(Boolean, default=True)
|
||||
created_at = Column(DateTime, server_default=func.now())
|
||||
@@ -0,0 +1,22 @@
|
||||
"""定时任务模型。"""
|
||||
from sqlalchemy import Column, Integer, String, Text, Boolean, DateTime, ForeignKey, func
|
||||
|
||||
from app.core.database import Base
|
||||
|
||||
|
||||
class ScheduledTask(Base):
|
||||
"""定时任务。"""
|
||||
__tablename__ = "scheduled_tasks"
|
||||
|
||||
id = Column(Integer, primary_key=True, autoincrement=True)
|
||||
name = Column(String(100), nullable=False)
|
||||
task_type = Column(String(30), nullable=False)
|
||||
instance_id = Column(Integer, ForeignKey("instances.id"), nullable=True)
|
||||
cron_expression = Column(String(50), nullable=False)
|
||||
config = Column(Text, nullable=True) # JSON
|
||||
is_enabled = Column(Boolean, default=True)
|
||||
last_run_at = Column(DateTime, nullable=True)
|
||||
last_run_status = Column(String(20), nullable=True)
|
||||
last_run_message = Column(Text, nullable=True)
|
||||
created_by = Column(Integer, ForeignKey("users.id"), nullable=True)
|
||||
created_at = Column(DateTime, server_default=func.now())
|
||||
@@ -0,0 +1,19 @@
|
||||
"""Schema 版本历史模型。"""
|
||||
from sqlalchemy import Column, Integer, String, Text, DateTime, ForeignKey, func
|
||||
|
||||
from app.core.database import Base
|
||||
|
||||
|
||||
class SchemaRevision(Base):
|
||||
"""Schema 版本历史（Schema-as-Code）。"""
|
||||
__tablename__ = "schema_revisions"
|
||||
|
||||
id = Column(Integer, primary_key=True, autoincrement=True)
|
||||
instance_id = Column(Integer, ForeignKey("instances.id"), nullable=False)
|
||||
database = Column(String(100), nullable=False)
|
||||
revision = Column(String(64), nullable=False)
|
||||
ddl_content = Column(Text, nullable=True)
|
||||
checksum = Column(String(64), nullable=False)
|
||||
applied_by = Column(Integer, ForeignKey("users.id"), nullable=True)
|
||||
applied_at = Column(DateTime, server_default=func.now())
|
||||
status = Column(String(20), default="applied")
|
||||
@@ -0,0 +1,21 @@
|
||||
"""慢日志模型。"""
|
||||
from sqlalchemy import Column, Integer, String, Text, DateTime, ForeignKey, func
|
||||
|
||||
from app.core.database import Base
|
||||
|
||||
|
||||
class SlowLog(Base):
|
||||
"""慢日志记录。"""
|
||||
__tablename__ = "slow_logs"
|
||||
|
||||
id = Column(Integer, primary_key=True, autoincrement=True)
|
||||
instance_id = Column(Integer, ForeignKey("instances.id"), nullable=False)
|
||||
database = Column(String(100), nullable=True)
|
||||
sql_digest = Column(String(64), nullable=True)
|
||||
sql_text = Column(Text, nullable=True)
|
||||
execution_count = Column(Integer, default=1)
|
||||
avg_time_ms = Column(Integer, nullable=True)
|
||||
max_time_ms = Column(Integer, nullable=True)
|
||||
rows_examined = Column(Integer, nullable=True)
|
||||
rows_sent = Column(Integer, nullable=True)
|
||||
created_at = Column(DateTime, server_default=func.now())
|
||||
@@ -0,0 +1,55 @@
|
||||
"""审批流程模型 — 支持多级、并行、条件审批。"""
|
||||
from sqlalchemy import Column, Integer, String, Text, Boolean, DateTime, ForeignKey, func
|
||||
from sqlalchemy.orm import relationship
|
||||
|
||||
from app.core.database import Base
|
||||
|
||||
|
||||
class WorkflowDefinition(Base):
|
||||
"""审批流程定义模板。"""
|
||||
__tablename__ = "workflow_definitions"
|
||||
|
||||
id = Column(Integer, primary_key=True, autoincrement=True)
|
||||
name = Column(String(100), nullable=False)
|
||||
description = Column(Text, nullable=True)
|
||||
is_default = Column(Boolean, default=False)
|
||||
is_active = Column(Boolean, default=True)
|
||||
created_at = Column(DateTime, server_default=func.now())
|
||||
|
||||
steps = relationship("WorkflowStep", back_populates="workflow",
|
||||
order_by="WorkflowStep.step_number",
|
||||
cascade="all, delete-orphan")
|
||||
|
||||
|
||||
class WorkflowStep(Base):
|
||||
"""审批步骤定义。"""
|
||||
__tablename__ = "workflow_steps"
|
||||
|
||||
id = Column(Integer, primary_key=True, autoincrement=True)
|
||||
workflow_id = Column(Integer, ForeignKey("workflow_definitions.id"), nullable=False)
|
||||
step_number = Column(Integer, nullable=False)
|
||||
name = Column(String(100), nullable=False)
|
||||
step_type = Column(String(20), nullable=False, default="serial") # serial / parallel / any_one
|
||||
approver_role = Column(String(20), nullable=True) # admin / dba / manager
|
||||
approver_ids = Column(Text, nullable=True) # JSON list of specific user ids
|
||||
is_required = Column(Boolean, default=True)
|
||||
timeout_hours = Column(Integer, default=24)
|
||||
auto_approve_on_timeout = Column(Boolean, default=False)
|
||||
|
||||
workflow = relationship("WorkflowDefinition", back_populates="steps")
|
||||
|
||||
|
||||
class TicketApproval(Base):
|
||||
"""工单审批实例（运行时记录）。"""
|
||||
__tablename__ = "ticket_approvals"
|
||||
|
||||
id = Column(Integer, primary_key=True, autoincrement=True)
|
||||
ticket_id = Column(Integer, ForeignKey("tickets.id"), nullable=False)
|
||||
step_number = Column(Integer, nullable=False)
|
||||
step_name = Column(String(100), nullable=True)
|
||||
approver_id = Column(Integer, ForeignKey("users.id"), nullable=True)
|
||||
approver_role = Column(String(20), nullable=True)
|
||||
action = Column(String(20), default="pending") # pending / approved / rejected / transferred / skipped
|
||||
comment = Column(Text, nullable=True)
|
||||
created_at = Column(DateTime, server_default=func.now())
|
||||
updated_at = Column(DateTime, server_default=func.now(), onupdate=func.now())
|
||||
Reference in new issue
Block a user