shihan11/medical_training
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: update init users

Browse Source
This commit is contained in:
shihan11
2026-06-13 13:21:53 +08:00
parent 05ce7e987e
commit 46761906fe
11 changed files with 502 additions and 430 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/training/migrations/0004_trainingsession.py
+34
View File
@@ -0,0 +1,34 @@
# Generated by Django 5.2.14 on 2026-06-13 05:00
from django.db import migrations, models
class Migration(migrations.Migration):
dependencies = [
('training', '0003_alter_trainingrecord_options_and_more'),
]
operations = [
migrations.CreateModel(
name='TrainingSession',
fields=[
('created_at', models.DateTimeField(auto_now_add=True, verbose_name='创建时间')),
('updated_at', models.DateTimeField(auto_now=True, verbose_name='更新时间')),
('id', models.BigAutoField(primary_key=True, serialize=False)),
('case_id', models.BigIntegerField(blank=True, null=True, verbose_name='病例ID')),
('case_type', models.CharField(blank=True, max_length=30, verbose_name='病例类型')),
('training_mode', models.CharField(blank=True, max_length=50, verbose_name='训练模式')),
('status', models.CharField(blank=True, max_length=30, verbose_name='状态')),
('external_user_id', models.CharField(blank=True, max_length=128, verbose_name='宿主系统用户ID')),
('started_at', models.DateTimeField(blank=True, null=True, verbose_name='开始时间')),
('completed_at', models.DateTimeField(blank=True, null=True, verbose_name='完成时间')),
],
options={
'verbose_name': '训练会话',
'verbose_name_plural': '训练会话',
'db_table': 'training_session',
'managed': False,
},
),
]
apps/user/auth/__init__.py
+4 -1
View File
@@ -2,7 +2,10 @@ from rest_framework_simplejwt.tokens import RefreshToken
from config.exceptions import AppError
ALLOWED_ROLE_TYPES = ('student', 'doctor', 'teacher')
# 系统五类角色：super_admin / hospital_admin / content_admin / doctor（带教医生）/ student
ROLE_TYPES = ('super_admin', 'hospital_admin', 'content_admin', 'doctor', 'student')
# 移动端可自注册的角色（带教老师即 doctor，不单列 teacher）
ALLOWED_ROLE_TYPES = ('student', 'doctor')
# CMS 端可登录的角色（U3 密码登录）：超级管理员 / 医院管理员 / 内容管理员 / 医生(带教老师)
CMS_ROLE_TYPES = ('super_admin', 'hospital_admin', 'content_admin', 'doctor')
apps/user/management/commands/init_users.py
+26 -1
View File
@@ -2,6 +2,8 @@ import os
from django.core.management.base import BaseCommand
from django.contrib.auth import get_user_model
from apps.user.models import TeacherStudentRelation
User = get_user_model()
@@ -24,9 +26,12 @@ class Command(BaseCommand):
# 创建超级管理员
self._create_superadmin()
# 创建测试角色用户
# 创建测试角色用户（覆盖五类角色：医院管理员/内容管理员/带教医生/学生）
self._create_test_users()
# 师生关系（只在 doctor 与 student 之间）
self._create_relation()
self.stdout.write(self.style.SUCCESS('\n[完成] 用户初始化完成'))
def _create_superadmin(self):
@@ -55,6 +60,13 @@ class Command(BaseCommand):
def _create_test_users(self):
"""创建测试用户"""
test_users = [
{
'username': 'hospital_admin',
'password': 'hospital123',
'real_name': '医院管理员',
'role_type': 'hospital_admin',
'phone': '13800138003',
},
{
'username': 'doctor1',
'password': 'doctor123',
@@ -103,3 +115,16 @@ class Command(BaseCommand):
f'[已存在] 用户: {user_data["username"]} ({user_data["real_name"]})'
)
)
def _create_relation(self):
"""初始化一条师生关系（带教医生 doctor1 → 学生 student1）。"""
teacher = User.objects.filter(username='doctor1', role_type='doctor').first()
student = User.objects.filter(username='student1', role_type='student').first()
if not teacher or not student:
return
_, created = TeacherStudentRelation.objects.get_or_create(
teacher=teacher, student=student,
defaults={'relation_type': '指导', 'status': 1},
)
msg = '[创建] 师生关系: doctor1 → student1' if created else '[已存在] 师生关系: doctor1 → student1'
self.stdout.write((self.style.SUCCESS if created else self.style.WARNING)(msg))
apps/user/permissions.py
+3 -3
View File
@@ -16,7 +16,7 @@ class IsUserListPermitted(BasePermission):
user = request.user
if _is_admin(user):
return True
if user.role_type == 'teacher':
if user.role_type == 'doctor': # 带教医生：可看名下学生
return True
raise AppError('USER_NO_LIST_PERMISSION', '您没有查看用户列表的权限', status_code=403)
@@ -32,8 +32,8 @@ class IsUserDetailPermitted(BasePermission):
# 本人：可查看自己
if user.id == obj.id:
return True
# 教师：可查看自己名下活跃学生
if user.role_type == 'teacher':
# 带教医生：可查看自己名下活跃学生
if user.role_type == 'doctor':
if TeacherStudentRelation.objects.filter(
teacher=user, student=obj, status=1
).exists():
apps/user/serializers.py
+10
View File
@@ -120,6 +120,16 @@ class TeacherStudentRelationSerializer(serializers.ModelSerializer):
model = TeacherStudentRelation
fields = '__all__'
def validate(self, attrs):
# 师生关系只能在 带教医生(doctor) 与 学生(student) 之间建立
teacher = attrs.get('teacher') or getattr(self.instance, 'teacher', None)
student = attrs.get('student') or getattr(self.instance, 'student', None)
if teacher is not None and teacher.role_type != 'doctor':
raise serializers.ValidationError({'teacher': '带教方必须是带教医生(doctor)'})
if student is not None and student.role_type != 'student':
raise serializers.ValidationError({'student': '学生方必须是学生(student)'})
return attrs
class InstitutionSerializer(serializers.ModelSerializer):
class Meta:
apps/user/views.py
+2 -2
View File
@@ -67,8 +67,8 @@ class UserViewSet(viewsets.ModelViewSet):
if self.action == 'list':
if user.role_type in ('super_admin', 'content_admin') or user.is_staff:
return qs # 管理员：全员
elif user.role_type == 'teacher':
# 教师：仅自己名下活跃学生
elif user.role_type == 'doctor':
# 带教医生：仅自己名下活跃学生
student_ids = TeacherStudentRelation.objects.filter(
teacher=user, status=1
).values_list('student_id', flat=True)
test/swagger_tryout.py
+1 -1
View File
@@ -432,7 +432,7 @@ django_eval(
f'admin = User.objects.create_user(username="{ADMIN_PHONE}", password="{ROLE_PWD}", '
f' phone="{ADMIN_PHONE}", real_name="Swagger管理员", role_type="super_admin", status=1); '
f'teacher = User.objects.create_user(username="{TEACHER_PHONE}", password="{ROLE_PWD}", '
f' phone="{TEACHER_PHONE}", real_name="Swagger教师", role_type="teacher", status=1); '
f' phone="{TEACHER_PHONE}", real_name="Swagger带教医生", role_type="doctor", status=1); '
f'student = User.objects.create_user(username="{STUDENT_PHONE}", password="{ROLE_PWD}", '
f' phone="{STUDENT_PHONE}", real_name="Swagger学生", role_type="student", status=1); '
f'TeacherStudentRelation.objects.create(teacher=teacher, student=student, '
test/test_user_happy.py
+4 -4
View File
@@ -245,7 +245,7 @@ class UserListDetailHappyPathTest(CacheTestCase):
"""HP-6: teacher GET /users/ → 200，仅包含名下活跃学生"""
teacher = create_test_user(
phone='13900100010', password='Teacher1',
real_name='王老师', role_type='teacher',
real_name='王老师', role_type='doctor',
)
stu_own = create_test_user(
phone='13900100011', password='Stu12345',
@@ -277,7 +277,7 @@ class UserListDetailHappyPathTest(CacheTestCase):
"""HP-7: 已结束(status=0)的师生关系学生不出现在列表"""
teacher = create_test_user(
phone='13900100020', password='Teacher1',
real_name='李老师', role_type='teacher',
real_name='李老师', role_type='doctor',
)
stu_active = create_test_user(
phone='13900100021', password='Stu12345',
@@ -339,7 +339,7 @@ class UserListDetailHappyPathTest(CacheTestCase):
"""HP-10: teacher GET /users/{student.id}/ → 200，可查看名下学生"""
teacher = create_test_user(
phone='13900100050', password='Teacher1',
real_name='赵老师', role_type='teacher',
real_name='赵老师', role_type='doctor',
)
student = create_test_user(
phone='13900100051', password='Stu12345',
@@ -370,7 +370,7 @@ class UserListDetailHappyPathTest(CacheTestCase):
)
teacher = create_test_user(
phone='13900100063', password='Teacher1',
real_name='张老师', role_type='teacher',
real_name='张老师', role_type='doctor',
)
client = get_auth_client(admin)
test/test_user_negative.py
+6 -6
View File
@@ -272,16 +272,16 @@ class UserListDetailNegativeTest(CacheTestCase):
self.assertEqual(resp.status_code, 403, resp.content)
self.assertEqual(resp.json()['code'], 'USER_NO_LIST_PERMISSION')
def test_doctor_list_403(self):
"""N12: doctor GET /users/ → 403 USER_NO_LIST_PERMISSION"""
def test_doctor_list_returns_own_students_only(self):
"""N12（新设计）: doctor=带教医生 GET /users/ → 200，仅名下学生（无学生时为空列表）"""
doctor = create_test_user(
phone='13800002002', password='Doc12345',
real_name='医生', role_type='doctor',
)
client = get_auth_client(doctor)
resp = client.get(USER_LIST_URL)
self.assertEqual(resp.status_code, 403, resp.content)
self.assertEqual(resp.json()['code'], 'USER_NO_LIST_PERMISSION')
self.assertEqual(resp.status_code, 200, resp.content)
self.assertEqual(resp.json()['count'], 0) # 无名下学生 → 空
def test_unauth_list_401(self):
"""N13: 未登录 GET /users/ → 401"""
@@ -315,7 +315,7 @@ class UserListDetailNegativeTest(CacheTestCase):
"""N16: teacher 查看非名下学生详情 → 403 USER_NO_VIEW_PERMISSION"""
teacher = create_test_user(
phone='13800002030', password='Teacher1',
real_name='刘老师', role_type='teacher',
real_name='刘老师', role_type='doctor',
)
unrelated = create_test_user(
phone='13800002031', password='Stu12345',
@@ -331,7 +331,7 @@ class UserListDetailNegativeTest(CacheTestCase):
"""N17: teacher 查看已结束关系学生详情 → 403 USER_NO_VIEW_PERMISSION"""
teacher = create_test_user(
phone='13800002040', password='Teacher1',
real_name='陈老师', role_type='teacher',
real_name='陈老师', role_type='doctor',
)
student = create_test_user(
phone='13800002041', password='Stu12345',