wangdl/api-server
2
0
Fork 0
Code Issues 29 Pull Requests Actions Packages Projects Releases Wiki Activity

API-ADMIN-INFO-018 P0 | 权限与审计日志接口 【status:partial】 #156

New Issue
Closed
opened 2026-06-07 12:33:27 +08:00 by wangdl · 3 comments
wangdl commented 2026-06-07 12:33:27 +08:00
Owner
Copy Link

权限: admin:learning:read/operate/export/config。GET /admin/learning/audit-logs。敏感操作写审计log。普通用户无法访问。

M-API-ADMIN-INFO 里程碑 issue。依赖 M-API-INFO 核心数据表和服务。对应 ADMIN-INFO-xxx。

## 权限: admin:learning:read/operate/export/config。GET /admin/learning/audit-logs。敏感操作写审计log。普通用户无法访问。 M-API-ADMIN-INFO 里程碑 issue。依赖 M-API-INFO 核心数据表和服务。对应 ADMIN-INFO-xxx。
wangdl added this to the M-API-ADMIN-INFO：学习信息管理后台接口 milestone 2026-06-07 12:33:27 +08:00
wangdl changed title from API-ADMIN-INFO-018 P0 | 权限与审计日志接口 to API-ADMIN-INFO-018 P0 | 权限与审计日志接口 【status:partial】 2026-06-07 19:07:58 +08:00
wangdl commented 2026-06-07 19:07:58 +08:00
Author
Owner
Copy Link

审查结论：admin 基础设施齐全（AdminAuthGuard、AdminRolesGuard、分页模式、audit log、15个已有admin模块可参考）。AdminLearningController 已有3个基础端点(GET sessions/analysis/ai-usage)。其余 ReadingEvent/Progress/DailyActivity/Record/timeline/diagnostics/reprocess/recalculate/export/config 均不存在。核心阻塞于 M-API-INFO schema 未建。

本 Issue: AdminAuthGuard+AdminRolesGuard 已全局可用。AdminAuditLog 模型存在。需新建 admin-learning 专用审计查询。

标签: audit:reviewed audit:api-info status:partial work:extend-existing,work:security

## 审查结论：admin 基础设施齐全（AdminAuthGuard、AdminRolesGuard、分页模式、audit log、15个已有admin模块可参考）。AdminLearningController 已有3个基础端点(GET sessions/analysis/ai-usage)。其余 ReadingEvent/Progress/DailyActivity/Record/timeline/diagnostics/reprocess/recalculate/export/config 均不存在。核心阻塞于 M-API-INFO schema 未建。 **本 Issue**: AdminAuthGuard+AdminRolesGuard 已全局可用。AdminAuditLog 模型存在。需新建 admin-learning 专用审计查询。 **标签**: audit:reviewed audit:api-info status:partial work:extend-existing,work:security
wangdl commented 2026-06-07 19:11:50 +08:00
Author
Owner
Copy Link

审查结论：当前 admin 基础设施齐全（AdminAuthGuard/AdminRolesGuard/分页/audit log/15个admin模块）。AdminLearningController 已有3个基础端点。但学习信息后台接口主要依赖 M-API-INFO 核心数据表与聚合服务。允许先做 DTO/Controller路由/权限装饰器/文档草案，但不得用 mock 数据作为最终验收。

本 Issue: AdminAuthGuard+AdminRolesGuard 已有。AdminAuditLog 模型已有。需新增 admin:learning:read/operate/export/config 权限码、学习审计写入。

状态: status:partial
工作类型: work:security,work:audit,work:extend-existing
阻塞: 无
标签: audit:reviewed audit:api-admin-info area:admin-api status:partial work:security,work:audit,work:extend-existing

## 审查结论：当前 admin 基础设施齐全（AdminAuthGuard/AdminRolesGuard/分页/audit log/15个admin模块）。AdminLearningController 已有3个基础端点。但学习信息后台接口主要依赖 M-API-INFO 核心数据表与聚合服务。允许先做 DTO/Controller路由/权限装饰器/文档草案，但不得用 mock 数据作为最终验收。 **本 Issue**: AdminAuthGuard+AdminRolesGuard 已有。AdminAuditLog 模型已有。需新增 admin:learning:read/operate/export/config 权限码、学习审计写入。 **状态**: status:partial **工作类型**: work:security,work:audit,work:extend-existing **阻塞**: 无 **标签**: audit:reviewed audit:api-admin-info area:admin-api status:partial work:security,work:audit,work:extend-existing
wangdl commented 2026-06-09 21:42:05 +08:00
Author
Owner
Copy Link

完成

Admin 端点已实现。详见 admin-reading.controller.ts

## 完成 Admin 端点已实现。详见 `admin-reading.controller.ts`
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
area:activity
活动/统计
area:admin
管理后台
area:admin-api
area:ai
AI/RAG
area:ai-runtime
AI Runtime / AI 分析体系相关
area:analytics
area:api
API 接口
area:auth
认证与授权
area:cos
对象存储
area:database
数据库/Migration
area:import
文件导入/解析
area:knowledge
知识库/知识点
area:learning-info
area:learning-session
area:quiz
测验/自测
area:reading-event
area:reading-progress
area:review
复习系统
area:security
安全相关
audit:api-admin-info
audit:api-info
audit:planned
已完成宏观规划，尚未代码审查
audit:reviewed
blocked-by:api-info-aggregation
blocked-by:api-info-core
blocked-by:api-info-ops
blocked-by:api-info-schema
blocked-by:processor
blocked-by:schema
priority:p0
最高优先级，阻塞发布
priority:p1
高优先级，里程碑必需
priority:p2
中优先级，后续版本
repo:api
API 仓库 Issue
status:blocked
被阻塞
status:done
已完成
status:partial
status:todo
type:aggregation
type:bug
缺陷修复
type:design
设计
type:docs
文档
type:feature
新功能
type:migration
type:refactor
重构
type:test
work:admin-api
work:aggregation
work:api
work:artifact
题目/卡片产物
work:audit
work:circuit-breaker
熔断
work:contract
work:design
架构/协议设计工作
work:docs
work:export
work:extend-existing
work:internal-api
Runtime 内部接口
work:job
Job 调度相关
work:new-module
work:new-table
work:ops
work:query
work:quota
额度/限流
work:schema
Prisma Schema 设计
work:security
work:service
Service 层实现
work:snapshot
Snapshot 构建
work:test
No Label
Milestone
No items
No Milestone M-API-ADMIN-INFO：学习信息管理后台接口
Projects
Clear projects
No project
Assignees
Clear assignees
suyun-Claude wangdl
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: wangdl/api-server#156
No description provided.
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?