break
ce24d5612e
All checks were successful
构建并部署到测试环境（无 SSH） / build-and-deploy (push) Successful in 9m20s
- 新增 6 张表与成对迁移 000212，扩展企业微信审批场景业务类型白名单 - 后台线下套餐订单与两条代理线下充值入账路径在来源成功事务内建账，来源唯一键幂等 - 核销申请、审批尝试记录、账单分摊预占与驳回重提，审批业务类型 employee_collection_approval - 企业微信终态消费幂等：通过转已核销、驳回释放预占、通过后撤销不回滚并转异常终态 - 退款成功事务内按 bill_id+refund_id 幂等冲销账单或仅写退款关联提示 - 线下收款方式字典、账单查询/统计/关闭、申请查询与代办权限，均写入事务内审计 OpenSpec Change: add-employee-collection-bills
86 lines
4.0 KiB
Go
86 lines
4.0 KiB
Go
package audit
|
|
|
|
import (
|
|
"context"
|
|
"strconv"
|
|
|
|
"gorm.io/gorm"
|
|
|
|
employeecollection "github.com/break/junhong_cmp_fiber/internal/application/employeecollection"
|
|
employeecollectiondomain "github.com/break/junhong_cmp_fiber/internal/domain/employeecollection"
|
|
"github.com/break/junhong_cmp_fiber/pkg/constants"
|
|
"github.com/break/junhong_cmp_fiber/pkg/errors"
|
|
)
|
|
|
|
// WriteEmployeeCollectionApplication 将核销申请、审批尝试记录与受影响账单写入统一 Audit Event。
|
|
// 申请与尝试的冻结快照含付款凭证对象键，审计只记录数量与外部流水号脱敏值，不复制敏感付款内容。
|
|
func (w *Writer) WriteEmployeeCollectionApplication(ctx context.Context, tx *gorm.DB, change employeecollection.ApplicationAudit) error {
|
|
if change.Application == nil || change.Application.ID == 0 {
|
|
return errors.New(errors.CodeInvalidParam, "核销申请审计资源不完整")
|
|
}
|
|
application := change.Application
|
|
applicationID := strconv.FormatUint(uint64(application.ID), 10)
|
|
resources := []ResourceInput{{
|
|
Type: constants.AuditResourceEmployeeCollectionApplication, ID: &applicationID,
|
|
Key: applicationID, DisplayName: "核销申请 " + applicationID,
|
|
Relation: constants.AuditResourceRelationPrimary, Role: constants.AuditResourceRoleCollectionApplication,
|
|
IdentitySnapshot: map[string]any{
|
|
"id": application.ID, "applicant_account_id": application.ApplicantAccountID,
|
|
"acting_operator_id": application.ActingOperatorID,
|
|
"payment_method_id": application.PaymentMethodID, "paid_amount": application.PaidAmount,
|
|
"status": application.Status,
|
|
"latest_approval_instance_id": application.LatestApprovalInstanceID,
|
|
},
|
|
BeforeData: change.BeforeData, AfterData: change.AfterData,
|
|
SubjectVisibility: constants.AuditSubjectResult, SubjectSummary: change.Summary,
|
|
}}
|
|
if change.Attempt != nil && change.Attempt.ID != 0 {
|
|
attempt := change.Attempt
|
|
attemptID := strconv.FormatUint(uint64(attempt.ID), 10)
|
|
instanceID := uint(0)
|
|
if attempt.ApprovalInstanceID != nil {
|
|
instanceID = *attempt.ApprovalInstanceID
|
|
}
|
|
resources = append(resources, ResourceInput{
|
|
Type: constants.AuditResourceEmployeeCollectionAttempt, ID: &attemptID,
|
|
Key: attemptID, DisplayName: "审批尝试 " + attemptID,
|
|
Relation: constants.AuditResourceRelationReference, Role: constants.AuditResourceRoleCollectionAttempt,
|
|
IdentitySnapshot: map[string]any{
|
|
"id": attempt.ID, "application_id": attempt.ApplicationID, "attempt_no": attempt.AttemptNo,
|
|
"paid_amount": attempt.PaidAmount, "approval_instance_id": instanceID,
|
|
},
|
|
SubjectVisibility: constants.AuditSubjectResult, SubjectSummary: change.Summary,
|
|
})
|
|
}
|
|
for _, bill := range change.Bills {
|
|
if bill == nil || bill.ID == 0 {
|
|
continue
|
|
}
|
|
billID := strconv.FormatUint(uint64(bill.ID), 10)
|
|
resources = append(resources, ResourceInput{
|
|
Type: constants.AuditResourceEmployeeCollectionBill, ID: &billID,
|
|
Key: bill.SourceKey, DisplayName: bill.SourceNo,
|
|
Relation: constants.AuditResourceRelationAffected, Role: constants.AuditResourceRoleCollectionBillAffected,
|
|
IdentitySnapshot: map[string]any{
|
|
"id": bill.ID, "source_type": bill.SourceType, "source_id": bill.SourceID,
|
|
"source_key": bill.SourceKey, "debtor_account_id": bill.DebtorAccountID, "status": bill.Status,
|
|
},
|
|
SubjectVisibility: constants.AuditSubjectResult, SubjectSummary: change.Summary,
|
|
})
|
|
}
|
|
return w.Append(ctx, tx, AppendInput{
|
|
EventID: change.EventID, ActionCode: change.ActionCode, Summary: change.Summary,
|
|
ScopeType: constants.AuditScopePlatform, Result: constants.AuditResultSuccess,
|
|
CorrelationID: change.CorrelationID,
|
|
Metadata: map[string]any{
|
|
"payment_method_code": application.PaymentMethodCode,
|
|
"payer_name": application.PayerName,
|
|
"external_transaction_no_masked": employeecollectiondomain.MaskExternalTransactionNo(
|
|
application.ExternalTransactionNo),
|
|
"voucher_count": len(application.PaymentVoucherKeys),
|
|
"bill_count": len(change.Bills),
|
|
},
|
|
Resources: resources,
|
|
})
|
|
}
|