Files
prop-data-guard/backend/app/api/v1/metadata.py
T
hiderfong 8b2bc84399 feat: implement full RBAC role-based access control
Backend:
- deps.py: add require_admin, require_manager, require_labeler, require_guest_or_above
- user.py: all write endpoints require admin
- datasource.py: write/sync endpoints require admin
- metadata.py: sync endpoint requires admin
- classification.py: category/rule write requires admin; results query requires guest+ with data isolation
- project.py: GET requires manager with created_by filtering; DELETE checks ownership
- task.py: my-tasks requires labeler with assignee_id filtering; create-task requires manager
- dashboard.py: requires guest_or_above
- report.py: requires guest_or_above
- project_service: list_projects adds created_by filter; list_results adds project_ids filter

Frontend:
- stores/user.ts: add hasRole, hasAnyRole, isAdmin, isManager, isLabeler, isSuperadmin
- router/index.ts: add roles to route meta; beforeEach checks role permissions
- Layout.vue: filter menu routes by user roles
- System.vue: hide add/edit/delete buttons for non-admins
- DataSource.vue: hide add/edit/delete/sync buttons for non-admins
- Project.vue: hide add/delete buttons for non-admins
2026-04-23 12:09:32 +08:00

67 lines
2.2 KiB
Python

from typing import Optional
from fastapi import APIRouter, Depends, Query
from sqlalchemy.orm import Session
from app.core.database import get_db
from app.models.user import User
from app.schemas.metadata import DatabaseOut, DataTableOut, DataColumnOut
from app.schemas.common import ResponseModel, ListResponse
from app.services import metadata_service
from app.api.deps import get_current_user, require_admin
router = APIRouter()
@router.get("/tree")
def get_tree(
source_id: Optional[int] = Query(None),
db: Session = Depends(get_db),
current_user: User = Depends(get_current_user),
):
tree = metadata_service.build_tree(db, source_id=source_id)
return ResponseModel(data=tree)
@router.get("/databases")
def list_databases(
source_id: Optional[int] = Query(None),
db: Session = Depends(get_db),
current_user: User = Depends(get_current_user),
):
items = metadata_service.list_databases(db, source_id=source_id)
return ResponseModel(data=[DatabaseOut.model_validate(i) for i in items])
@router.get("/tables")
def list_tables(
database_id: Optional[int] = Query(None),
keyword: Optional[str] = Query(None),
db: Session = Depends(get_db),
current_user: User = Depends(get_current_user),
):
items, total = metadata_service.list_tables(db, database_id=database_id, keyword=keyword)
return ListResponse(data=[DataTableOut.model_validate(i) for i in items], total=total, page=1, page_size=len(items))
@router.get("/columns")
def list_columns(
table_id: Optional[int] = Query(None),
keyword: Optional[str] = Query(None),
page: int = Query(1, ge=1),
page_size: int = Query(50, ge=1, le=500),
db: Session = Depends(get_db),
current_user: User = Depends(get_current_user),
):
items, total = metadata_service.list_columns(db, table_id=table_id, keyword=keyword, page=page, page_size=page_size)
return ListResponse(data=[DataColumnOut.model_validate(i) for i in items], total=total, page=page, page_size=page_size)
@router.post("/sync/{source_id}")
def sync_metadata(
source_id: int,
db: Session = Depends(get_db),
current_user: User = Depends(require_admin),
):
result = metadata_service.sync_metadata(db, source_id, current_user.id)
return ResponseModel(data=result)