lauadminandClaude Sonnet 5
f4072be451
Wires the CRM (exoCRM GetOrders) into the dashboard as a locally persisted order queue instead of the previous static mockup: - CrmClient Protocol + ExoCrmClient/StubCrmClient for the CRM's signed JSON-RPC API - Order model + migration, synced from CRM on each queue view; soft-deleted orders stay hidden across re-syncs - GET/DELETE /api/v1/orders with "no receipt"/"receipt issued" tabs (the latter is empty until Checkbox fiscalization lands) - Dashboard: real order list, item-detail modal, tab switcher, one-click delete Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
60 lines
2.5 KiB
Python
60 lines
2.5 KiB
Python
"""Журнал аудита.
|
|
|
|
Для фискального приложения это не опциональная возможность: по каждому чеку
|
|
должно быть видно, кто и когда его инициировал. Записи только добавляются —
|
|
API на изменение и удаление не существует.
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import uuid
|
|
from typing import Any
|
|
|
|
from sqlalchemy import DateTime, ForeignKey, Index, String, func
|
|
from sqlalchemy.dialects.postgresql import JSONB
|
|
from sqlalchemy.orm import Mapped, mapped_column
|
|
|
|
from app.db.base import Base, UUIDPrimaryKeyMixin
|
|
|
|
|
|
class AuditAction(str):
|
|
"""Значения действий. Намеренно обычные строки, а не Enum.
|
|
|
|
Добавление нового типа события не должно требовать миграции БД.
|
|
"""
|
|
|
|
LOGIN_SUCCESS = "auth.login.success"
|
|
LOGIN_FAILED = "auth.login.failed"
|
|
LOGOUT = "auth.logout"
|
|
TOKEN_REFRESH = "auth.token.refresh"
|
|
TOKEN_REUSE_DETECTED = "auth.token.reuse_detected"
|
|
USER_CREATED = "user.created"
|
|
USER_UPDATED = "user.updated"
|
|
USER_DEACTIVATED = "user.deactivated"
|
|
ORDER_DELETED = "order.deleted"
|
|
|
|
|
|
class AuditLog(UUIDPrimaryKeyMixin, Base):
|
|
__tablename__ = "audit_log"
|
|
|
|
# Пользователь может быть удалён, журнал — нет: ondelete=SET NULL,
|
|
# а человекочитаемый актор дублируется в actor_label.
|
|
user_id: Mapped[uuid.UUID | None] = mapped_column(
|
|
ForeignKey("users.id", ondelete="SET NULL"), index=True
|
|
)
|
|
actor_label: Mapped[str | None] = mapped_column(String(320))
|
|
action: Mapped[str] = mapped_column(String(64), nullable=False, index=True)
|
|
entity_type: Mapped[str | None] = mapped_column(String(64))
|
|
entity_id: Mapped[str | None] = mapped_column(String(64))
|
|
payload: Mapped[dict[str, Any]] = mapped_column(JSONB, nullable=False, default=dict)
|
|
ip: Mapped[str | None] = mapped_column(String(64))
|
|
user_agent: Mapped[str | None] = mapped_column(String(512))
|
|
created_at: Mapped[Any] = mapped_column(
|
|
DateTime(timezone=True), server_default=func.now(), nullable=False, index=True
|
|
)
|
|
|
|
__table_args__ = (
|
|
# Основной запрос админки: «покажи историю по этой сущности».
|
|
Index("ix_audit_log_entity", "entity_type", "entity_id"),
|
|
)
|