feat: enhance employee CRUD with search, filters, and security module

server/tests/test_employee_service.py

@@ -4,11 +4,13 @@ from sqlalchemy import create_engine, func, select
 from sqlalchemy.orm import Session, sessionmaker
 from sqlalchemy.pool import StaticPool
 
+from app.core.security import verify_password
 from app.db.base import Base
 from app.models.employee import Employee
 from app.models.employee_change_log import EmployeeChangeLog
 from app.models.organization import OrganizationUnit
 from app.models.role import Role
+from app.schemas.employee import EmployeeUpdate
 from app.services.employee import EmployeeService
 
 
@@ -60,3 +62,56 @@ def test_employee_detail_contains_department_and_roles() -> None:
         assert detail.manager
         assert detail.organization is not None
         assert detail.roles
+
+
+def test_update_employee_persists_changes_and_hashes_password() -> None:
+    with build_session() as db:
+        service = EmployeeService(db)
+        employee = service.list_employees()[0]
+
+        updated = service.update_employee(
+            employee.id,
+            EmployeeUpdate(
+                name="测试员工A",
+                phone="13900001111",
+                location="深圳南山",
+                position="高级财务分析师",
+                grade="P6",
+                finance_owner_name="共享财务中心",
+                cost_center="CC-TEST-01",
+                role_codes=["finance", "user"],
+                password="12345",
+            ),
+        )
+
+        persisted = db.get(Employee, employee.id)
+
+        assert updated.name == "测试员工A"
+        assert updated.phone == "13900001111"
+        assert updated.location == "深圳南山"
+        assert updated.position == "高级财务分析师"
+        assert updated.grade == "P6"
+        assert updated.financeOwner == "共享财务中心"
+        assert updated.costCenter == "CC-TEST-01"
+        assert updated.roleCodes == ["finance", "user"]
+        assert persisted is not None
+        assert persisted.password_hash is not None
+        assert verify_password("12345", persisted.password_hash)
+        assert any("更新员工信息" in item.action for item in updated.history)
+        assert any("重置员工登录密码" == item.action for item in updated.history)
+
+
+def test_disable_employee_marks_status_and_logs_change() -> None:
+    with build_session() as db:
+        service = EmployeeService(db)
+        employee = next(item for item in service.list_employees() if item.status != "停用")
+
+        updated = service.disable_employee(employee.id)
+
+        persisted = db.get(Employee, employee.id)
+
+        assert updated.status == "停用"
+        assert updated.statusTone == "neutral"
+        assert persisted is not None
+        assert persisted.employment_status == "停用"
+        assert any(item.action == "停用员工账号" for item in updated.history)