refactor: mock清理+安全配置+通用组件+菜单优化

P0安全: SECRET_KEY/ADMIN_PASSWORD/CORS环境变量化, seed仅admin P1Mock: mock.ts 301->88行, 删8数据mock+5generateMock, net-1300行 P2组件: useToast/useFetchList+ConfirmDialog/FormDialog P3菜单: menuSections/menuItems->constants/menu.ts P4API: NotificationsPage/WorkflowPage重写+RolesPage演示测试: 1050passed, tsc clean
2026-05-24 02:42:29 +08:00
1 parent ec3a03cf38
commit 8b921c6c83
@@ -0,0 +1,136 @@
+"""系统设置种子数据 — 首次启动自动初始化。"""
+
+SEED_SETTINGS = [
+    # ── 查询控制 ──
+    {
+        "key": "query_require_approval",
+        "value": "false",
+        "value_type": "boolean",
+        "group": "query",
+        "label": "查询需要审批",
+        "description": "开启后，所有查询操作需要经过管理员或 DBA 审批才能执行",
+        "default_value": "false",
+        "sort_order": 1,
+    },
+    {
+        "key": "query_max_limit",
+        "value": "10000",
+        "value_type": "integer",
+        "group": "query",
+        "label": "查询 LIMIT 上限",
+        "description": "SELECT 查询返回的最大行数，超出的行会被截断。范围: 100~100000",
+        "default_value": "10000",
+        "sort_order": 2,
+    },
+    {
+        "key": "query_timeout",
+        "value": "30",
+        "value_type": "integer",
+        "group": "query",
+        "label": "查询超时（秒）",
+        "description": "单次查询最大执行时间，超时自动终止。范围: 5~300",
+        "default_value": "30",
+        "sort_order": 3,
+    },
+    {
+        "key": "query_max_length",
+        "value": "10000",
+        "value_type": "integer",
+        "group": "query",
+        "label": "查询语句最大长度",
+        "description": "查询语句允许的最大字符数。范围: 500~50000",
+        "default_value": "10000",
+        "sort_order": 4,
+    },
+    {
+        "key": "query_auto_limit",
+        "value": "true",
+        "value_type": "boolean",
+        "group": "query",
+        "label": "自动添加 LIMIT",
+        "description": "当 SELECT 语句没有 LIMIT 时自动追加，防止返回海量数据",
+        "default_value": "true",
+        "sort_order": 5,
+    },
+    {
+        "key": "query_enable_masking",
+        "value": "true",
+        "value_type": "boolean",
+        "group": "query",
+        "label": "启用数据脱敏",
+        "description": "自动对手机号、身份证、邮箱等敏感字段进行脱敏处理",
+        "default_value": "true",
+        "sort_order": 6,
+    },
+    {
+        "key": "query_save_history",
+        "value": "true",
+        "value_type": "boolean",
+        "group": "query",
+        "label": "保存查询历史",
+        "description": "自动记录每次查询内容，方便后续复用和审计",
+        "default_value": "true",
+        "sort_order": 7,
+    },
+
+    # ── 安全控制 ──
+    {
+        "key": "security_max_login_attempts",
+        "value": "5",
+        "value_type": "integer",
+        "group": "security",
+        "label": "最大登录失败次数",
+        "description": "连续登录失败达到次数后锁定账号（0 表示不限制）",
+        "default_value": "5",
+        "sort_order": 10,
+    },
+    {
+        "key": "security_password_min_length",
+        "value": "6",
+        "value_type": "integer",
+        "group": "security",
+        "label": "密码最小长度",
+        "description": "用户密码的最小字符数",
+        "default_value": "6",
+        "sort_order": 11,
+    },
+    {
+        "key": "security_enable_audit_log",
+        "value": "true",
+        "value_type": "boolean",
+        "group": "security",
+        "label": "启用审计日志",
+        "description": "记录所有关键操作（查询、工单、权限变更等）",
+        "default_value": "true",
+        "sort_order": 12,
+    },
+
+    # ── 工单控制 ──
+    {
+        "key": "ticket_default_workflow",
+        "value": "standard",
+        "value_type": "string",
+        "group": "ticket",
+        "label": "默认审批流程",
+        "description": "新建工单使用的默认审批流程: standard(标准三级) / simple(简单一级) / urgent(紧急快速)",
+        "default_value": "standard",
+        "sort_order": 20,
+    },
+    {
+        "key": "ticket_allow_rollback",
+        "value": "true",
+        "value_type": "boolean",
+        "group": "ticket",
+        "label": "允许工单回滚",
+        "description": "执行失败的工单是否允许重新执行（回到 approved 状态）",
+        "default_value": "true",
+        "sort_order": 21,
+    },
+]
+
+# 分组元信息
+SETTING_GROUPS = {
+    "query": {"label": "查询控制", "icon": "🔍", "description": "控制查询行为、LIMIT、超时和脱敏策略"},
+    "security": {"label": "安全设置", "icon": "🔒", "description": "登录安全、密码策略、审计日志"},
+    "ticket": {"label": "工单设置", "icon": "📋", "description": "审批流程、回滚策略"},
+}