修改用户设置的新增用户的权限点击操作

backend/app/api/v1/endpoints/platform.py

@@ -16,6 +16,7 @@ import httpx
 
 from app.core.auth import filter_accessible_resource_ids, filter_accessible_resource_ids_batch, get_current_user, has_resource_access, is_admin
 from app.core.config import get_settings
+from app.core.audit import audit_log, AuditActions
 from app.db.platform_store import get_platform_store
 from app.modules.compute_gateway.client import ComputeNodeClient
 from app.modules.compute_gateway.sync import fetch_eval_result_content, poll_compute_jobs_once
@@ -884,6 +885,11 @@ async def test_online_model(payload: dict[str, Any] = Body(...)) -> dict[str, An
 
 
 @router.post("/model-manage")
+@audit_log(
+    action=AuditActions.CREATE_MODEL,
+    target_type="model",
+    detail_template="创建模型: {name}",
+)
 async def create_model(payload: dict[str, Any] = Body(...), current_user: dict = Depends(get_current_user)) -> dict[str, Any]:
     payload.setdefault("created_by", current_user.get("id"))
     try:
@@ -908,6 +914,11 @@ async def model_detail(model_id: str, current_user: dict = Depends(get_current_u
 
 
 @router.put("/model-manage/{model_id}")
+@audit_log(
+    action=AuditActions.UPDATE_MODEL,
+    target_type="model",
+    detail_template="更新模型: {model_id}",
+)
 async def update_model(model_id: str, payload: dict[str, Any] = Body(...)) -> dict[str, Any]:
     try:
         return ok(get_platform_store().update_model(model_id, payload))
@@ -1266,6 +1277,11 @@ async def dataset_list(current_user: dict = Depends(get_current_user)) -> dict[s
 
 
 @router.post("/dataset-manage")
+@audit_log(
+    action=AuditActions.CREATE_DATASET,
+    target_type="dataset",
+    detail_template="创建数据集: {name}",
+)
 async def create_dataset(payload: dict[str, Any] = Body(...), current_user: dict = Depends(get_current_user)) -> dict[str, Any]:
     payload.setdefault("created_by", current_user.get("id"))
     dataset = get_platform_store().create_dataset(payload)
@@ -1284,6 +1300,11 @@ async def dataset_detail(dataset_id: str, current_user: dict = Depends(get_curre
 
 
 @router.put("/dataset-manage/{dataset_id}")
+@audit_log(
+    action=AuditActions.UPDATE_DATASET,
+    target_type="dataset",
+    detail_template="更新数据集: {dataset_id}",
+)
 async def update_dataset(dataset_id: str, payload: dict[str, Any] = Body(...)) -> dict[str, Any]:
     try:
         return ok(get_platform_store().update_dataset(dataset_id, payload))
@@ -1292,6 +1313,11 @@ async def update_dataset(dataset_id: str, payload: dict[str, Any] = Body(...)) -
 
 
 @router.delete("/dataset-manage/{dataset_id}")
+@audit_log(
+    action=AuditActions.DELETE_DATASET,
+    target_type="dataset",
+    detail_template="删除数据集: {dataset_id}",
+)
 async def delete_dataset(dataset_id: str, current_user: dict = Depends(get_current_user)) -> dict[str, Any]:
     if not has_resource_access("dataset", dataset_id, current_user, "delete"):
         raise fail(403, "no permission to delete this dataset")
@@ -1331,6 +1357,11 @@ async def fine_tune_list(current_user: dict = Depends(get_current_user)) -> dict
 
 
 @router.post("/fine-tune")
+@audit_log(
+    action=AuditActions.CREATE_FINE_TUNE,
+    target_type="fine_tune",
+    detail_template="创建微调任务: {name}",
+)
 async def create_fine_tune(payload: dict[str, Any] = Body(...), current_user: dict = Depends(get_current_user)) -> dict[str, Any]:
     payload.setdefault("created_by", current_user.get("id"))
     if not is_admin(current_user):