Samir Boulahtit
d7a0ff8818
This commit completes the migration to a fully module-driven architecture: ## Models Migration - Moved all domain models from models/database/ to their respective modules: - tenancy: User, Admin, Vendor, Company, Platform, VendorDomain, etc. - cms: MediaFile, VendorTheme - messaging: Email, VendorEmailSettings, VendorEmailTemplate - core: AdminMenuConfig - models/database/ now only contains Base and TimestampMixin (infrastructure) ## Schemas Migration - Moved all domain schemas from models/schema/ to their respective modules: - tenancy: company, vendor, admin, team, vendor_domain - cms: media, image, vendor_theme - messaging: email - models/schema/ now only contains base.py and auth.py (infrastructure) ## Routes Migration - Moved admin routes from app/api/v1/admin/ to modules: - menu_config.py -> core module - modules.py -> tenancy module - module_config.py -> tenancy module - app/api/v1/admin/ now only aggregates auto-discovered module routes ## Menu System - Implemented module-driven menu system with MenuDiscoveryService - Extended FrontendType enum: PLATFORM, ADMIN, VENDOR, STOREFRONT - Added MenuItemDefinition and MenuSectionDefinition dataclasses - Each module now defines its own menu items in definition.py - MenuService integrates with MenuDiscoveryService for template rendering ## Documentation - Updated docs/architecture/models-structure.md - Updated docs/architecture/menu-management.md - Updated architecture validation rules for new exceptions ## Architecture Validation - Updated MOD-019 rule to allow base.py in models/schema/ - Created core module exceptions.py and schemas/ directory - All validation errors resolved (only warnings remain) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
106 lines
3.6 KiB
Python
106 lines
3.6 KiB
Python
# app/modules/monitoring/routes/api/admin_audit.py
|
|
"""
|
|
Admin audit log endpoints.
|
|
|
|
Provides endpoints for:
|
|
- Viewing audit logs with filtering
|
|
- Tracking admin actions
|
|
- Generating audit reports
|
|
"""
|
|
|
|
import logging
|
|
from datetime import datetime
|
|
|
|
from fastapi import APIRouter, Depends, Query
|
|
from sqlalchemy.orm import Session
|
|
|
|
from app.api.deps import get_current_admin_api
|
|
from app.core.database import get_db
|
|
from app.modules.monitoring.services.admin_audit_service import admin_audit_service
|
|
from models.schema.auth import UserContext
|
|
from app.modules.tenancy.schemas.admin import (
|
|
AdminAuditLogFilters,
|
|
AdminAuditLogListResponse,
|
|
AdminAuditLogResponse,
|
|
)
|
|
|
|
admin_audit_router = APIRouter(prefix="/audit")
|
|
logger = logging.getLogger(__name__)
|
|
|
|
|
|
@admin_audit_router.get("/logs", response_model=AdminAuditLogListResponse)
|
|
def get_audit_logs(
|
|
admin_user_id: int | None = Query(None, description="Filter by admin user"),
|
|
action: str | None = Query(None, description="Filter by action type"),
|
|
target_type: str | None = Query(None, description="Filter by target type"),
|
|
date_from: datetime | None = Query(None, description="Filter from date"),
|
|
date_to: datetime | None = Query(None, description="Filter to date"),
|
|
skip: int = Query(0, ge=0, description="Number of records to skip"),
|
|
limit: int = Query(100, ge=1, le=1000, description="Maximum records to return"),
|
|
db: Session = Depends(get_db),
|
|
current_admin: UserContext = Depends(get_current_admin_api),
|
|
):
|
|
"""
|
|
Get filtered admin audit logs.
|
|
|
|
Returns paginated list of all admin actions with filtering options.
|
|
Useful for compliance, security audits, and tracking admin activities.
|
|
"""
|
|
filters = AdminAuditLogFilters(
|
|
admin_user_id=admin_user_id,
|
|
action=action,
|
|
target_type=target_type,
|
|
date_from=date_from,
|
|
date_to=date_to,
|
|
skip=skip,
|
|
limit=limit,
|
|
)
|
|
|
|
logs = admin_audit_service.get_audit_logs(db, filters)
|
|
total = admin_audit_service.get_audit_logs_count(db, filters)
|
|
|
|
logger.info(f"Admin {current_admin.username} retrieved {len(logs)} audit logs")
|
|
|
|
return AdminAuditLogListResponse(logs=logs, total=total, skip=skip, limit=limit)
|
|
|
|
|
|
@admin_audit_router.get("/logs/recent", response_model=list[AdminAuditLogResponse])
|
|
def get_recent_audit_logs(
|
|
limit: int = Query(20, ge=1, le=100),
|
|
db: Session = Depends(get_db),
|
|
current_admin: UserContext = Depends(get_current_admin_api),
|
|
):
|
|
"""Get recent audit logs (last 20 by default)."""
|
|
filters = AdminAuditLogFilters(limit=limit)
|
|
return admin_audit_service.get_audit_logs(db, filters)
|
|
|
|
|
|
@admin_audit_router.get("/logs/my-actions", response_model=list[AdminAuditLogResponse])
|
|
def get_my_actions(
|
|
limit: int = Query(50, ge=1, le=100),
|
|
db: Session = Depends(get_db),
|
|
current_admin: UserContext = Depends(get_current_admin_api),
|
|
):
|
|
"""Get audit logs for current admin's actions."""
|
|
return admin_audit_service.get_recent_actions_by_admin(
|
|
db=db, admin_user_id=current_admin.id, limit=limit
|
|
)
|
|
|
|
|
|
@admin_audit_router.get("/logs/target/{target_type}/{target_id}")
|
|
def get_actions_by_target(
|
|
target_type: str,
|
|
target_id: str,
|
|
limit: int = Query(50, ge=1, le=100),
|
|
db: Session = Depends(get_db),
|
|
current_admin: UserContext = Depends(get_current_admin_api),
|
|
):
|
|
"""
|
|
Get all actions performed on a specific target.
|
|
|
|
Useful for tracking the history of a specific vendor, user, or entity.
|
|
"""
|
|
return admin_audit_service.get_actions_by_target(
|
|
db=db, target_type=target_type, target_id=target_id, limit=limit
|
|
)
|