feat: 为核心业务 API 全面挂载审计日志装饰器

inventory-backend/app/api/v1/inbound/base.py

@@ -2,7 +2,7 @@
 
 from flask import Blueprint, request, jsonify, send_file, g
 from app.services.inbound.base_service import MaterialBaseService
-from app.utils.decorators import login_required, permission_required
+from app.utils.decorators import login_required, permission_required, audit_log
 import traceback
 import datetime
 import json
@@ -197,6 +197,11 @@ def export_data():
 # ==============================================================================
 @inbound_base_bp.route('/', methods=['POST'])
 @permission_required('material_list:operation')
+@audit_log(
+    module='基础信息管理',
+    action='新增',
+    get_target_name_fn=lambda: request.get_json().get('name') if request.get_json() else None
+)
 def create():
     try:
         data = request.get_json()
@@ -253,6 +258,12 @@ def create():
 # ==============================================================================
 @inbound_base_bp.route('/<int:id>', methods=['PUT'])
 @permission_required('material_list:operation')
+@audit_log(
+    module='基础信息管理',
+    action='修改',
+    get_target_id_fn=lambda: request.view_args.get('id'),
+    get_target_name_fn=lambda: request.get_json().get('name') if request.get_json() else None
+)
 def update(id):
     try:
         data = request.get_json()
@@ -302,6 +313,11 @@ def update(id):
 # ==============================================================================
 @inbound_base_bp.route('/<int:id>', methods=['DELETE'])
 @permission_required('material_list:operation')
+@audit_log(
+    module='基础信息管理',
+    action='删除',
+    get_target_id_fn=lambda: request.view_args.get('id')
+)
 def delete(id):
     try:
         MaterialBaseService.delete_material(id)