freedakgmail
33b4c734aa
后端: - 新增认证(auth)、任务(tasks)、映射(mappings)、对账(reconciliation)、异常(exceptions)、导出(exports) API - 新增核心模块: database, security, permissions, tenant, exceptions, error_handlers - 新增数据模型: user, company, reconciliation_task, field_mapping, uploaded_file 等 - 新增服务层: ai_recognizer, file_parser, file_storage, mapping, reconciliation 等 - 添加数据库迁移脚本 前端: - 新增登录页面和仪表盘页面 - 新增任务列表、任务详情、字段映射页面 - 新增异常处理页面和规则设置页面 - 新增 API 代理路由 /api/[...path] - 新增 UI 组件库 (button, card, dialog, input, table 等) - 新增 auth 组件 (ProtectedRoute, PermissionGate) - 新增 layout 组件 (Header, Sidebar) - 新增 mapping 组件 (FieldMappingTable, AISuggestionPanel) - 新增 API 客户端和 hooks (useAsync, useToast, usePermission 等) - 新增状态管理 (auth-store, company-store, ui-store) - 集成 Tailwind CSS 和 shadcn/ui 组件库 其他: - 添加 Alembic 数据库迁移配置 - 添加初始化示例数据脚本 - 更新项目文档
61 lines
1.5 KiB
Python
61 lines
1.5 KiB
Python
# 权限常量定义
|
|
# 基于 PRD 第7章权限设计
|
|
|
|
# 任务管理权限
|
|
PERM_TASK_CREATE = "task:create"
|
|
PERM_TASK_VIEW = "task:view"
|
|
PERM_TASK_UPDATE = "task:update"
|
|
PERM_TASK_DELETE = "task:delete"
|
|
PERM_TASK_EXPORT = "task:export"
|
|
|
|
# 用户管理权限
|
|
PERM_USER_CREATE = "user:create"
|
|
PERM_USER_VIEW = "user:view"
|
|
PERM_USER_UPDATE = "user:update"
|
|
PERM_USER_DELETE = "user:delete"
|
|
|
|
# 企业管理权限
|
|
PERM_COMPANY_VIEW = "company:view"
|
|
PERM_COMPANY_UPDATE = "company:update"
|
|
|
|
# 审计日志权限
|
|
PERM_AUDIT_VIEW = "audit:view"
|
|
|
|
# 角色默认权限映射
|
|
ROLE_PERMISSIONS = {
|
|
"管理员": [
|
|
PERM_TASK_CREATE, PERM_TASK_VIEW, PERM_TASK_UPDATE, PERM_TASK_DELETE, PERM_TASK_EXPORT,
|
|
PERM_USER_CREATE, PERM_USER_VIEW, PERM_USER_UPDATE, PERM_USER_DELETE,
|
|
PERM_COMPANY_VIEW, PERM_COMPANY_UPDATE,
|
|
PERM_AUDIT_VIEW,
|
|
],
|
|
"财务主管": [
|
|
PERM_TASK_CREATE, PERM_TASK_VIEW, PERM_TASK_UPDATE, PERM_TASK_DELETE, PERM_TASK_EXPORT,
|
|
PERM_USER_CREATE, PERM_USER_VIEW, PERM_USER_UPDATE,
|
|
PERM_COMPANY_VIEW,
|
|
PERM_AUDIT_VIEW,
|
|
],
|
|
"会计": [
|
|
PERM_TASK_CREATE, PERM_TASK_VIEW, PERM_TASK_UPDATE, PERM_TASK_EXPORT,
|
|
PERM_USER_VIEW,
|
|
],
|
|
"出纳": [
|
|
PERM_TASK_VIEW, PERM_TASK_EXPORT,
|
|
],
|
|
"人事": [
|
|
PERM_TASK_VIEW,
|
|
],
|
|
}
|
|
|
|
|
|
def get_role_permissions(role: str) -> list[str]:
|
|
"""
|
|
获取角色的默认权限列表
|
|
|
|
Args:
|
|
role: 角色名称
|
|
|
|
Returns:
|
|
权限列表
|
|
"""
|
|
return ROLE_PERMISSIONS.get(role, []) |