document-management/backend/dms/models/audit_log.py

"""追加写审计日志模型。"""

from __future__ import annotations

from datetime import datetime

from sqlalchemy import BigInteger, CheckConstraint, Index, JSON, String, Text, text
from sqlalchemy.dialects.mysql import DATETIME
from sqlalchemy.orm import Mapped, mapped_column

from dms.extensions import db


class AuditLog(db.Model):
    __tablename__ = "sys_audit_log"
    __table_args__ = (
        CheckConstraint(
            "action_type IN ("
            "'LOGIN', 'LOGOUT', 'VIEW_DOCUMENT', 'DOWNLOAD_DOCUMENT', "
            "'UPLOAD_DOCUMENT', 'BATCH_IMPORT', 'EDIT_DOCUMENT', "
            "'DELETE_DOCUMENT', 'CREATE_CATEGORY', 'EDIT_CATEGORY', "
            "'DELETE_CATEGORY', 'CHANGE_PERMISSION', 'BIND_ATTACHMENT', "
            "'UNBIND_ATTACHMENT', 'RESTORE_DOCUMENT', "
            "'CREATE_ORGANIZATION', 'EDIT_ORGANIZATION', "
            "'DELETE_ORGANIZATION', 'CREATE_USER', 'EDIT_USER', "
            "'DELETE_USER', 'RESET_USER_PASSWORD', "
            "'REORDER_DOCUMENT', 'REORDER_ATTACHMENT', 'REORDER_CATEGORY', "
            "'CREATE_ROLE', 'EDIT_ROLE', 'DELETE_ROLE', "
            "'CHANGE_ROLE_PERMISSION', 'CHANGE_ROLE_USER', "
            "'DOCUMENT_PASSWORD_SET', 'DOCUMENT_PASSWORD_REMOVE', "
            "'CREATE_IP_ENTRY', 'EDIT_IP_ENTRY', 'DELETE_IP_ENTRY', "
            "'ASSIGN_ORG_IP'"
            ")",
            name="audit_action_type",
        ),
        CheckConstraint(
            "target_type IS NULL OR target_type IN ("
            "'AUTH', 'CATEGORY', 'DOCUMENT', 'ATTACHMENT', "
            "'PERMISSION', 'ATTACHMENT_BINDING', 'ORGANIZATION', 'USER', "
            "'ROLE', 'IP_ENTRY'"
            ")",
            name="audit_target_type",
        ),
        CheckConstraint(
            "operation_result IN ('SUCCESS', 'FAILURE')",
            name="audit_operation_result",
        ),
        Index("ix_sys_audit_log_created_at", "created_at"),
        Index("ix_sys_audit_log_user_created", "user_id", "created_at"),
        Index(
            "ix_sys_audit_log_organization_created",
            "organization_id",
            "created_at",
        ),
        Index("ix_sys_audit_log_action_created", "action_type", "created_at"),
        Index(
            "ix_sys_audit_log_target_created",
            "target_type",
            "target_id",
            "created_at",
        ),
        Index(
            "ix_sys_audit_log_result_created",
            "operation_result",
            "created_at",
        ),
        Index("ix_sys_audit_log_request_id", "request_id"),
    )

    id: Mapped[int] = mapped_column(BigInteger, primary_key=True, autoincrement=True)
    user_id: Mapped[int | None] = mapped_column(BigInteger, nullable=True)
    username: Mapped[str | None] = mapped_column(String(64), nullable=True)
    real_name: Mapped[str | None] = mapped_column(String(64), nullable=True)
    organization_id: Mapped[int | None] = mapped_column(BigInteger, nullable=True)
    organization_name: Mapped[str | None] = mapped_column(String(128), nullable=True)
    action_type: Mapped[str] = mapped_column(String(32), nullable=False)
    target_type: Mapped[str | None] = mapped_column(String(32), nullable=True)
    target_id: Mapped[int | None] = mapped_column(BigInteger, nullable=True)
    target_name: Mapped[str | None] = mapped_column(String(255), nullable=True)
    operation_result: Mapped[str] = mapped_column(String(20), nullable=False)
    failure_reason: Mapped[str | None] = mapped_column(String(1000), nullable=True)
    client_ip: Mapped[str | None] = mapped_column(String(64), nullable=True)
    user_agent: Mapped[str | None] = mapped_column(String(500), nullable=True)
    request_id: Mapped[str | None] = mapped_column(String(64), nullable=True)
    operation_detail: Mapped[dict[str, object] | None] = mapped_column(
        JSON,
        nullable=True,
    )
    created_at: Mapped[datetime] = mapped_column(
        DATETIME(fsp=3),
        nullable=False,
        server_default=text("CURRENT_TIMESTAMP(3)"),
    )