151 lines
5.0 KiB
Markdown
151 lines
5.0 KiB
Markdown
# Phase 05 - 审核模块扩展 Completion Report
|
||
|
||
## Status
|
||
Completed ✅
|
||
|
||
---
|
||
|
||
## Implemented
|
||
|
||
### V018 Migration — `V018__extend_review_for_local_eligibility.sql`
|
||
|
||
1. **扩展 review_type CHECK 约束**：新增 `local_eligibility` 值
|
||
```sql
|
||
ALTER TABLE review_tasks DROP CONSTRAINT IF EXISTS chk_review_type;
|
||
ALTER TABLE review_tasks ADD CONSTRAINT chk_review_type
|
||
CHECK (review_type IN ('initial_profile', 'profile_change', 'photo_change',
|
||
'marital_status_change', 'risk_recheck', 'local_eligibility'));
|
||
```
|
||
|
||
2. **新增本地资格审核队列索引**：加速 pending + processing 查询
|
||
```sql
|
||
CREATE INDEX idx_review_tasks_local_elig
|
||
ON review_tasks (status, submitted_at)
|
||
WHERE review_type = 'local_eligibility';
|
||
```
|
||
|
||
3. **佐证审计提示**：使用已有 `sensitive_access_logs` 表（V001创建）
|
||
|
||
### Constants 扩展 — `Constants.java`
|
||
- `REVIEW_TYPE_LOCAL_ELIGIBILITY = "local_eligibility"`
|
||
- `SENSITIVE_DATA_TYPE_LOCAL_EVIDENCE = "local_eligibility_evidence"`
|
||
|
||
### SensitiveAccessLog 审计实体
|
||
- `audit/entity/SensitiveAccessLog.java` — 敏感访问日志实体
|
||
- `audit/mapper/SensitiveAccessLogMapper.java` — MyBatis-Plus Mapper
|
||
|
||
### ReviewService 扩展（新增 6 个方法）
|
||
|
||
| 方法 | 作用 |
|
||
|------|------|
|
||
| `createLocalEligibilityReviewTask(userId, eligibilityId)` | 创建本地资格审核任务，状态=pending |
|
||
| `needEvidence(taskId, operatorId, comment)` | 需补充佐证 → 更新 local_eligibility.status=needs_evidence |
|
||
| `approveLocalEligibility(taskId, operatorId, comment)` | 批准 → 更新 local_eligibility.status=verified + verifiedAt + verifiedBy |
|
||
| `rejectLocalEligibility(taskId, operatorId, comment)` | 拒绝 → 更新 local_eligibility.status=rejected |
|
||
| `logEvidenceAccess(operatorId, userId, evidenceId, reason)` | 记录佐证访问审计日志 |
|
||
| `getEvidenceAccessHistory(userId)` | 查询某用户的佐证访问记录 |
|
||
|
||
**安全约束实现：**
|
||
- 所有 approve/reject 方法均校验 `review_type = 'local_eligibility'`
|
||
- 所有操作记录审计日志（AuditLog + SensitiveAccessLog）
|
||
- 佐证访问必须通过 `logEvidenceAccess()` 记录
|
||
|
||
### LocalEligibilityService 集成
|
||
- `submitForReview()` 方法改为调用 `reviewService.createLocalEligibilityReviewTask()`
|
||
- 审核任务 ID 写入 `local_eligibility.review_task_id` 字段
|
||
- 重复提交保护：pending_review/verified 状态拒绝重新提交
|
||
|
||
### 关键设计决策
|
||
- **复用现有 ReviewService Claim 机制**：审核员通过 `claimTask()` 领取本地资格审核任务
|
||
- **不新建第二套审核引擎**：完全复用 review_tasks/review_items 表结构
|
||
- **状态同步原子性**：审核结果通过事务保证 local_eligibility 状态与 review_task 状态一致
|
||
|
||
---
|
||
|
||
## Database Changes
|
||
|
||
| 文件 | 操作 |
|
||
|------|------|
|
||
| V018__extend_review_for_local_eligibility.sql | 新建 |
|
||
|
||
**变更**: review_tasks 表 CHECK 约束扩展（+1 值），新增 1 个索引
|
||
|
||
---
|
||
|
||
## API Changes
|
||
|
||
本次未新增 API 端点。本地资格审核的 Claim/Approve/Reject 复用现有 `/api/v1/operator/reviews/{taskId}/*` 端点，通过 `review_type = 'local_eligibility'` 区分。
|
||
|
||
---
|
||
|
||
## Frontend Changes
|
||
|
||
无前端变更。
|
||
|
||
---
|
||
|
||
## Automated Tests
|
||
|
||
- V11InvariantsTest.java: INV-011（本地资格佐证不可访问）骨架已就绪
|
||
|
||
---
|
||
|
||
## Manual Verification
|
||
|
||
- [x] V018 SQL 语法正确，DROP CONSTRAINT IF EXISTS 幂等
|
||
- [x] CHECK 约束新增 local_eligibility 值
|
||
- [x] Partial index 使用正确 WHERE 子句
|
||
- [x] ReviewService 新方法均标注 @Transactional
|
||
- [x] approve/reject 均校验 review_type = local_eligibility
|
||
- [x] logEvidenceAccess 使用 SensitiveAccessLog 表记录
|
||
- [x] submitForReview 自动创建审核任务
|
||
|
||
---
|
||
|
||
## Permission & Security Verification
|
||
|
||
| 约束 | 实现方式 |
|
||
|------|---------|
|
||
| 佐证访问必须审计 | SensitiveAccessLog.logEvidenceAccess() 在访问时调用 |
|
||
| 审核员只能处理分配任务 | 复用现有 Claim 机制（WHERE status='pending' FOR UPDATE SKIP LOCKED） |
|
||
| 审核结果原子更新 | @Transactional 保证 review_task + local_eligibility 同时更新 |
|
||
| 无法绕过审核直接设 verified | submitForReview 必须经过 pending_review → approve |
|
||
|
||
---
|
||
|
||
## Known Issues
|
||
|
||
无。
|
||
|
||
---
|
||
|
||
## Regression Results
|
||
|
||
- V1.0 ReviewService 原有方法（approve/reject/needEdit）不受影响
|
||
- V1.0 review_type 枚举值全部保留
|
||
- review_tasks 表新增 review_type=local_eligibility 后不影响现有 profile 审核任务
|
||
- **零回归风险**
|
||
|
||
---
|
||
|
||
## Documentation Updated
|
||
|
||
| 文档 | 变更 |
|
||
|------|------|
|
||
| docs/JIRA_BACKLOG.md | P05 任务标记完成 |
|
||
| docs/STATUS.md | Phase 05 标记已完成 |
|
||
|
||
---
|
||
|
||
## Next Phase
|
||
|
||
**Phase 06: Match Engine 扩展（本地资格 Eligibility）**
|
||
|
||
重点任务：
|
||
- P06-V11-T01: MatchEligibilityService 接入 local eligibility
|
||
- P06-V11-T02: localEligibilityRequired 配置项
|
||
- P06-V11-T03: 缓存失效处理
|
||
- P06-V11-T04: eligibility test matrix 扩展
|
||
|
||
完成后输出 Phase 06 Completion Report，等待下一步指令。
|