lauadminandClaude Opus 5.5
56ac0fc370
Cashiers can edit recipient, TTN, notes, goods and total in the order
modal and save via PATCH /orders/{id}. Edited orders get edited_at and
are no longer overwritten by CRM sync. Editing is blocked once a receipt
exists; changing the TTN resets Nova Poshta tracking fields.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
66 lines
2.8 KiB
Python
66 lines
2.8 KiB
Python
"""Журнал аудита.
|
|
|
|
Для фискального приложения это не опциональная возможность: по каждому чеку
|
|
должно быть видно, кто и когда его инициировал. Записи только добавляются —
|
|
API на изменение и удаление не существует.
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import uuid
|
|
from typing import Any
|
|
|
|
from sqlalchemy import DateTime, ForeignKey, Index, String, func
|
|
from sqlalchemy.dialects.postgresql import JSONB
|
|
from sqlalchemy.orm import Mapped, mapped_column
|
|
|
|
from app.db.base import Base, UUIDPrimaryKeyMixin
|
|
|
|
|
|
class AuditAction(str):
|
|
"""Значения действий. Намеренно обычные строки, а не Enum.
|
|
|
|
Добавление нового типа события не должно требовать миграции БД.
|
|
"""
|
|
|
|
LOGIN_SUCCESS = "auth.login.success"
|
|
LOGIN_FAILED = "auth.login.failed"
|
|
LOGOUT = "auth.logout"
|
|
TOKEN_REFRESH = "auth.token.refresh"
|
|
TOKEN_REUSE_DETECTED = "auth.token.reuse_detected"
|
|
USER_CREATED = "user.created"
|
|
USER_UPDATED = "user.updated"
|
|
USER_DEACTIVATED = "user.deactivated"
|
|
ORDER_DELETED = "order.deleted"
|
|
ORDER_UPDATED = "order.updated"
|
|
CASH_REGISTER_CREATED = "cash_register.created"
|
|
CASH_REGISTER_UPDATED = "cash_register.updated"
|
|
RECEIPT_CREATE_REQUESTED = "receipt.create_requested"
|
|
RECEIPT_CANCELLED = "receipt.cancelled"
|
|
ORDER_CRM_STATUS_SET = "order.crm_status_set"
|
|
|
|
|
|
class AuditLog(UUIDPrimaryKeyMixin, Base):
|
|
__tablename__ = "audit_log"
|
|
|
|
# Пользователь может быть удалён, журнал — нет: ondelete=SET NULL,
|
|
# а человекочитаемый актор дублируется в actor_label.
|
|
user_id: Mapped[uuid.UUID | None] = mapped_column(
|
|
ForeignKey("users.id", ondelete="SET NULL"), index=True
|
|
)
|
|
actor_label: Mapped[str | None] = mapped_column(String(320))
|
|
action: Mapped[str] = mapped_column(String(64), nullable=False, index=True)
|
|
entity_type: Mapped[str | None] = mapped_column(String(64))
|
|
entity_id: Mapped[str | None] = mapped_column(String(64))
|
|
payload: Mapped[dict[str, Any]] = mapped_column(JSONB, nullable=False, default=dict)
|
|
ip: Mapped[str | None] = mapped_column(String(64))
|
|
user_agent: Mapped[str | None] = mapped_column(String(512))
|
|
created_at: Mapped[Any] = mapped_column(
|
|
DateTime(timezone=True), server_default=func.now(), nullable=False, index=True
|
|
)
|
|
|
|
__table_args__ = (
|
|
# Основной запрос админки: «покажи историю по этой сущности».
|
|
Index("ix_audit_log_entity", "entity_type", "entity_id"),
|
|
)
|