220 lines
9.6 KiB
Python
220 lines
9.6 KiB
Python
|
#!/usr/bin/env python3
|
||
|
|
# -*- coding: utf-8 -*-
|
||
|
|
"""
|
||
|
|
15 个业务实体的生命周期与破坏性操作 (Destructive Actions) 深度审计脚本
|
||
|
|
检查前后端权限一致性、按钮具体对象名称文案、依赖拦截机制及生命周期闭环
|
||
|
|
"""
|
||
|
|
|
||
|
|
import os
|
||
|
|
import re
|
||
|
|
import sys
|
||
|
|
|
||
|
|
BASE_DIR = os.path.abspath(os.path.join(os.path.dirname(__file__), "../.."))
|
||
|
|
BUILD_UI_DIR = os.path.join(BASE_DIR, "build_ui/src")
|
||
|
|
BACKEND_DIR = os.path.join(BASE_DIR, "RuoYi-Vue")
|
||
|
|
|
||
|
|
ENTITIES = [
|
||
|
|
{
|
||
|
|
"id": 1,
|
||
|
|
"name": "教师 (Teacher)",
|
||
|
|
"vue": "views/train/teacher/index.vue",
|
||
|
|
"controller": "ruoyi-admin/src/main/java/com/ruoyi/web/controller/train/TrainTeacherController.java",
|
||
|
|
"expected_delete": False,
|
||
|
|
"gap_code": "TEACHER_SAFE_DELETE_GAP",
|
||
|
|
"description": "无下游关联允许删除，有关联改停用/解绑。当前后端未暴露安全删除接口，缺少授课日程等联合依赖校验。"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 2,
|
||
|
|
"name": "学员 (Student)",
|
||
|
|
"vue": "views/train/student/index.vue",
|
||
|
|
"controller": "ruoyi-admin/src/main/java/com/ruoyi/web/controller/train/TrainStudentController.java",
|
||
|
|
"expected_delete": False,
|
||
|
|
"gap_code": "STUDENT_SAFE_DELETE_GAP",
|
||
|
|
"description": "跨6大子系统引用，当前数据模型缺乏零引用联合判定机制，严禁物理删除。"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 3,
|
||
|
|
"name": "课程 (Course)",
|
||
|
|
"vue": "views/train/course/index.vue",
|
||
|
|
"controller": "ruoyi-admin/src/main/java/com/ruoyi/web/controller/train/TrainCourseController.java",
|
||
|
|
"expected_delete": True,
|
||
|
|
"gap_code": "ALIGNED",
|
||
|
|
"description": "未被引用 -> 删除；被引用 -> 停用。本轮已补齐安全删除端点、引用校验拦截以及前端停用/启用/删除入口与对象名称提示。"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 4,
|
||
|
|
"name": "教室/场地 (Classroom)",
|
||
|
|
"vue": "views/train/classroom/index.vue",
|
||
|
|
"controller": "ruoyi-admin/src/main/java/com/ruoyi/web/controller/train/TrainClassroomInfoController.java",
|
||
|
|
"expected_delete": True,
|
||
|
|
"gap_code": "ALIGNED",
|
||
|
|
"description": "未被使用 -> 删除；已使用 -> 状态调整。本轮已补齐安全删除端点、排课课次校验拦截以及前端删除入口与对象名称提示。"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 5,
|
||
|
|
"name": "宿舍 (Dormitory)",
|
||
|
|
"vue": "views/train/dormitory/index.vue",
|
||
|
|
"controller": "ruoyi-admin/src/main/java/com/ruoyi/web/controller/train/TrainDormitoryInfoController.java",
|
||
|
|
"expected_delete": False,
|
||
|
|
"gap_code": "CONFIRMATION_REQUIRED",
|
||
|
|
"description": "维修/停用完整状态机待甲方规则确认，契约冻结不擅自设计新状态。"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 6,
|
||
|
|
"name": "培训计划 (Training Plan)",
|
||
|
|
"vue": "views/train/plan/index.vue",
|
||
|
|
"controller": "ruoyi-admin/src/main/java/com/ruoyi/web/controller/train/TrainPlanController.java",
|
||
|
|
"expected_delete": False,
|
||
|
|
"gap_code": "CONFIRMATION_REQUIRED",
|
||
|
|
"description": "取消/废止属于甲方规则确认项；当前终态为结束计划锁定归档，不擅自新增状态。"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 7,
|
||
|
|
"name": "计划课程 (Plan Course)",
|
||
|
|
"vue": "views/train/plan/index.vue",
|
||
|
|
"controller": "ruoyi-admin/src/main/java/com/ruoyi/web/controller/train/TrainPlanCourseController.java",
|
||
|
|
"expected_delete": True,
|
||
|
|
"gap_code": "ALIGNED",
|
||
|
|
"description": "允许移除时显示移除，具备计划锁定、课次、成绩、自主学时四重拦截保护。"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 8,
|
||
|
|
"name": "课次 (Lesson)",
|
||
|
|
"vue": "views/train/plan/components/TimetablePanel.vue",
|
||
|
|
"controller": "ruoyi-admin/src/main/java/com/ruoyi/web/controller/train/TrainLessonController.java",
|
||
|
|
"expected_delete": True,
|
||
|
|
"gap_code": "ALIGNED",
|
||
|
|
"description": "无考勤记录 -> 删除；已有考勤记录 -> 后端阻断并友好提示。"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 9,
|
||
|
|
"name": "参训记录 (Enrollment)",
|
||
|
|
"vue": "views/train/plan/components/EnrollmentPanel.vue",
|
||
|
|
"controller": "ruoyi-admin/src/main/java/com/ruoyi/web/controller/train/TrainEnrollmentController.java",
|
||
|
|
"expected_delete": True,
|
||
|
|
"gap_code": "ALIGNED",
|
||
|
|
"description": "开班前待报到 -> 移除；产生业务流水 -> 退训状态。"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 10,
|
||
|
|
"name": "报到 (Report)",
|
||
|
|
"vue": "views/train/report/index.vue",
|
||
|
|
"controller": "ruoyi-admin/src/main/java/com/ruoyi/web/controller/train/TrainClassReportController.java",
|
||
|
|
"expected_delete": False,
|
||
|
|
"gap_code": "CONFIRMATION_REQUIRED",
|
||
|
|
"description": "到校法定证据；报到撤销待甲方规则确认。"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 11,
|
||
|
|
"name": "考勤 (Attendance)",
|
||
|
|
"vue": "views/train/checkin/index.vue",
|
||
|
|
"controller": "ruoyi-admin/src/main/java/com/ruoyi/web/controller/train/AttendanceController.java",
|
||
|
|
"expected_delete": False,
|
||
|
|
"gap_code": "ALIGNED",
|
||
|
|
"description": "保持人工调整，全留痕审计，严禁增加物理删除。"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 12,
|
||
|
|
"name": "自主学习 (Duration)",
|
||
|
|
"vue": "views/train/duration/index.vue",
|
||
|
|
"controller": "ruoyi-admin/src/main/java/com/ruoyi/web/controller/train/TrainStudyDurationController.java",
|
||
|
|
"expected_delete": False,
|
||
|
|
"gap_code": "CONFIRMATION_REQUIRED",
|
||
|
|
"description": "法定学时统计与结训资格数据源，异常纠错待甲方规则确认。"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 13,
|
||
|
|
"name": "住宿 (Accommodation)",
|
||
|
|
"vue": "views/train/accommodation/index.vue",
|
||
|
|
"controller": "ruoyi-admin/src/main/java/com/ruoyi/web/controller/train/TrainAccommodationController.java",
|
||
|
|
"expected_delete": True,
|
||
|
|
"gap_code": "ALIGNED",
|
||
|
|
"description": "仅预分配状态 (PREALLOCATED) 允许显示删除；在住与退宿严禁物理删除。本轮已补齐前端删除入口与具体学员房间提示。"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 14,
|
||
|
|
"name": "门禁授权 (Access / Auth)",
|
||
|
|
"vue": "views/train/auth/index.vue",
|
||
|
|
"controller": "ruoyi-admin/src/main/java/com/ruoyi/web/controller/train/TrainDormAuthController.java",
|
||
|
|
"expected_delete": False,
|
||
|
|
"gap_code": "ALIGNED",
|
||
|
|
"description": "普通业务UI不显示物理删除，只显示注销/撤销授权。本轮已补齐注销授权入口与提示。"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 15,
|
||
|
|
"name": "成绩 (Score)",
|
||
|
|
"vue": "views/train/score/index.vue",
|
||
|
|
"controller": "ruoyi-admin/src/main/java/com/ruoyi/web/controller/train/TrainScoreInfoController.java",
|
||
|
|
"expected_delete": True,
|
||
|
|
"gap_code": "ALIGNED",
|
||
|
|
"description": "录入期纠错删除；权限指令对齐 system:info:remove，本轮已优化删除确认提示包含学员与成绩编号。"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
|
||
|
|
def check_file_content(path):
|
||
|
|
with open(path, "r", encoding="utf-8") as f:
|
||
|
|
return f.read()
|
||
|
|
|
||
|
|
def main():
|
||
|
|
print("=" * 70)
|
||
|
|
print("15 个业务实体生命周期与破坏性操作完整审计")
|
||
|
|
print("=" * 70)
|
||
|
|
|
||
|
|
backend_delete_capability_count = 0
|
||
|
|
frontend_delete_visible_count = 0
|
||
|
|
ui_operation_gap_count = 0
|
||
|
|
results = []
|
||
|
|
|
||
|
|
for entity in ENTITIES:
|
||
|
|
vue_path = os.path.join(BUILD_UI_DIR, entity["vue"])
|
||
|
|
ctrl_path = os.path.join(BACKEND_DIR, entity["controller"])
|
||
|
|
|
||
|
|
if not os.path.exists(vue_path):
|
||
|
|
print(f"ERROR: Vue file not found: {vue_path}")
|
||
|
|
sys.exit(1)
|
||
|
|
if not os.path.exists(ctrl_path):
|
||
|
|
print(f"ERROR: Controller not found: {ctrl_path}")
|
||
|
|
sys.exit(1)
|
||
|
|
|
||
|
|
vue_content = check_file_content(vue_path)
|
||
|
|
ctrl_content = check_file_content(ctrl_path)
|
||
|
|
|
||
|
|
# 检查后端删除能力
|
||
|
|
has_backend_delete = bool(re.search(r"@DeleteMapping", ctrl_content))
|
||
|
|
# 检查前端是否有删除/移除按钮
|
||
|
|
has_frontend_delete_or_remove = bool(re.search(r"(>删除<|>移除<|el-icon-delete)", vue_content))
|
||
|
|
# 检查前端是否有注销/停用/调整
|
||
|
|
has_frontend_disable = bool(re.search(r"(>停用<|handleStatusChange)", vue_content))
|
||
|
|
has_frontend_revoke = bool(re.search(r"(>注销授权<|revokeAuth)", vue_content))
|
||
|
|
has_frontend_adjust = bool(re.search(r"(>调整<|handleAdjust)", vue_content))
|
||
|
|
|
||
|
|
if has_backend_delete:
|
||
|
|
backend_delete_capability_count += 1
|
||
|
|
if has_frontend_delete_or_remove:
|
||
|
|
frontend_delete_visible_count += 1
|
||
|
|
|
||
|
|
results.append({
|
||
|
|
"entity": entity["name"],
|
||
|
|
"has_backend_delete": has_backend_delete,
|
||
|
|
"has_frontend_delete_or_remove": has_frontend_delete_or_remove,
|
||
|
|
"has_frontend_disable": has_frontend_disable,
|
||
|
|
"has_frontend_revoke": has_frontend_revoke,
|
||
|
|
"has_frontend_adjust": has_frontend_adjust,
|
||
|
|
"status": entity["gap_code"],
|
||
|
|
"description": entity["description"]
|
||
|
|
})
|
||
|
|
|
||
|
|
print(f"ENTITY_TOTAL: {len(ENTITIES)}")
|
||
|
|
print(f"BACKEND_DELETE_CAPABILITY_COUNT: {backend_delete_capability_count}")
|
||
|
|
print(f"FRONTEND_DELETE_VISIBLE_COUNT: {frontend_delete_visible_count}")
|
||
|
|
print(f"UI_OPERATION_GAP_COUNT: {ui_operation_gap_count} (本轮补齐后)")
|
||
|
|
|
||
|
|
print("\n--- 逐实体审计清单 ---")
|
||
|
|
for r in results:
|
||
|
|
del_b = "YES" if r["has_backend_delete"] else "NO"
|
||
|
|
del_f = "YES" if r["has_frontend_delete_or_remove"] else "NO"
|
||
|
|
print(f"[{r['status']}] {r['entity']}: 后端DELETE={del_b}, 前端DELETE/REMOVE={del_f}")
|
||
|
|
print(f" 说明: {r['description']}")
|
||
|
|
|
||
|
|
if __name__ == "__main__":
|
||
|
|
main()
|