hiderfong
8b2bc84399
Backend: - deps.py: add require_admin, require_manager, require_labeler, require_guest_or_above - user.py: all write endpoints require admin - datasource.py: write/sync endpoints require admin - metadata.py: sync endpoint requires admin - classification.py: category/rule write requires admin; results query requires guest+ with data isolation - project.py: GET requires manager with created_by filtering; DELETE checks ownership - task.py: my-tasks requires labeler with assignee_id filtering; create-task requires manager - dashboard.py: requires guest_or_above - report.py: requires guest_or_above - project_service: list_projects adds created_by filter; list_results adds project_ids filter Frontend: - stores/user.ts: add hasRole, hasAnyRole, isAdmin, isManager, isLabeler, isSuperadmin - router/index.ts: add roles to route meta; beforeEach checks role permissions - Layout.vue: filter menu routes by user roles - System.vue: hide add/edit/delete buttons for non-admins - DataSource.vue: hide add/edit/delete/sync buttons for non-admins - Project.vue: hide add/delete buttons for non-admins
56 lines
2.0 KiB
Python
56 lines
2.0 KiB
Python
from fastapi import APIRouter, Depends, Response
|
|
from sqlalchemy.orm import Session
|
|
from sqlalchemy import func
|
|
|
|
from app.core.database import get_db
|
|
from app.models.user import User
|
|
from app.models.project import ClassificationResult, ClassificationProject
|
|
from app.models.classification import Category, DataLevel
|
|
from app.schemas.common import ResponseModel
|
|
from app.api.deps import get_current_user, require_guest_or_above
|
|
from app.services import report_service
|
|
|
|
router = APIRouter()
|
|
|
|
|
|
@router.get("/stats")
|
|
def get_report_stats(
|
|
db: Session = Depends(get_db),
|
|
current_user: User = Depends(require_guest_or_above),
|
|
):
|
|
"""Global report statistics."""
|
|
total = db.query(ClassificationResult).count()
|
|
auto = db.query(ClassificationResult).filter(ClassificationResult.source == 'auto').count()
|
|
manual = db.query(ClassificationResult).filter(ClassificationResult.source == 'manual').count()
|
|
reviewed = db.query(ClassificationResult).filter(ClassificationResult.status == 'reviewed').count()
|
|
|
|
# Level distribution
|
|
level_dist = db.query(DataLevel.name, DataLevel.code, func.count(ClassificationResult.id)).\
|
|
join(ClassificationResult, DataLevel.id == ClassificationResult.level_id).\
|
|
group_by(DataLevel.id).order_by(DataLevel.sort_order).all()
|
|
|
|
return ResponseModel(data={
|
|
"total": total,
|
|
"auto": auto,
|
|
"manual": manual,
|
|
"reviewed": reviewed,
|
|
"level_distribution": [
|
|
{"name": name, "code": code, "count": count}
|
|
for name, code, count in level_dist
|
|
],
|
|
})
|
|
|
|
|
|
@router.get("/projects/{project_id}/download")
|
|
def download_report(
|
|
project_id: int,
|
|
db: Session = Depends(get_db),
|
|
current_user: User = Depends(get_current_user),
|
|
):
|
|
content = report_service.generate_classification_report(db, project_id)
|
|
return Response(
|
|
content=content,
|
|
media_type="application/vnd.openxmlformats-officedocument.wordprocessingml.document",
|
|
headers={"Content-Disposition": f"attachment; filename=report_project_{project_id}.docx"},
|
|
)
|