package jnpf.bizcommon.audit.controller;
|
|
import cn.dev33.satoken.annotation.SaCheckPermission;
|
import jnpf.bizcommon.audit.entity.model.AuditEventDetailVO;
|
import jnpf.bizcommon.audit.entity.model.AuditEventListVO;
|
import jnpf.bizcommon.audit.entity.model.AuditPageQuery;
|
import jnpf.bizcommon.audit.service.AuditQueryService;
|
import jnpf.base.ActionResult;
|
import jnpf.base.vo.PageListVO;
|
import org.springframework.beans.factory.annotation.Autowired;
|
import org.springframework.web.bind.annotation.GetMapping;
|
import org.springframework.web.bind.annotation.PathVariable;
|
import org.springframework.web.bind.annotation.PostMapping;
|
import org.springframework.web.bind.annotation.RequestBody;
|
import org.springframework.web.bind.annotation.RequestMapping;
|
import org.springframework.web.bind.annotation.RequestParam;
|
import org.springframework.web.bind.annotation.RestController;
|
|
import java.util.List;
|
|
/**
|
* 审计事件查询 API（spec §7.1）：操作分页 / 单事件详情 / 操作时间线。两级权限点：
|
* audit.query（列表、时间线，无字段值正文）与 audit.detail（详情，含变更前后值等敏感内容）。
|
*/
|
@RestController
|
@RequestMapping("/audit/events")
|
public class AuditQueryController {
|
@Autowired private AuditQueryService auditQueryService;
|
|
@SaCheckPermission("audit.query")
|
@PostMapping("/page")
|
public ActionResult<PageListVO<AuditEventListVO>> page(@RequestBody AuditPageQuery query) {
|
return ActionResult.success(auditQueryService.page(query));
|
}
|
|
@SaCheckPermission("audit.detail")
|
@GetMapping("/{id}")
|
public ActionResult<AuditEventDetailVO> detail(@PathVariable("id") Long id) {
|
return ActionResult.success(auditQueryService.detail(id));
|
}
|
|
@SaCheckPermission("audit.query")
|
@GetMapping("/timeline")
|
public ActionResult<List<AuditEventListVO>> timeline(@RequestParam("targetId") String targetId) {
|
return ActionResult.success(auditQueryService.timeline(targetId));
|
}
|
}
|
