API 权限清单

概述

系统采用 RBAC 权限模型，所有 API 权限点在 SystemPermission 枚举中定义。共包含 100+ 个权限点，覆盖全部业务接口。

认证与用户

权限编码权限名称路径方法
auth:logout退出登录/auth/logoutPOST
auth:me查看当前用户信息/auth/meGET
user:list查询用户列表/usersGET
user:create后台创建用户/usersPOST
user:info获取用户详情/users/{userId}GET
user:update更新用户信息/users/{userId}PATCH
user:delete删除用户/users/{userId}DELETE
user:status:update更新用户状态/users/{userId}/statusPATCH
user:password:reset重置用户密码/users/{userId}/reset-passwordPOST
user:import导入用户与下载模板/users/import/**POST
user:membership:list获取用户社团关系/users/{userId}/membershipsGET
user:role:assign分配用户角色/users/{userId}/rolesPOST

角色与权限

权限编码权限名称路径方法
role:list查询角色列表/rolesGET
role:create创建角色/rolesPOST
role:detail获取角色详情/roles/{roleId}GET
role:update更新角色/roles/{roleId}PATCH
role:delete删除角色/roles/{roleId}DELETE
role:permission:assign分配角色权限/roles/{roleId}/permissionsPOST
permission:list查询权限点列表/permissionsGET
permission:create创建权限点/permissionsPOST

社团管理

权限编码权限名称路径方法
club:list查询社团列表/clubsGET
club:create创建社团/clubsPOST
club:detail获取社团详情/clubs/{clubId}GET
club:update更新社团信息/clubs/{clubId}PATCH
club:status:update更新社团状态/clubs/{clubId}/statusPATCH
club:recruitment-status:update更新社团招新状态/clubs/{clubId}/recruitment-statusPATCH
department:list查询部门列表/clubs/{clubId}/departmentsGET
department:create创建部门/clubs/{clubId}/departmentsPOST
department:detail获取部门详情/departments/{departmentId}GET
department:update更新部门/departments/{departmentId}PATCH
department:delete删除部门/departments/{departmentId}DELETE
position:list查询岗位列表/clubs/{clubId}/positionsGET
position:create创建岗位/clubs/{clubId}/positionsPOST
position:detail获取岗位详情/positions/{positionId}GET
position:update更新岗位/positions/{positionId}PATCH
position:delete删除岗位/positions/{positionId}DELETE

成员管理

权限编码权限名称路径方法
membership:list查询成员列表/membershipsGET
membership:create新增成员/membershipsPOST
membership:detail获取成员详情/memberships/{membershipId}GET
membership:update更新成员/memberships/{membershipId}PATCH
membership:position:assign分配成员岗位/memberships/{membershipId}/assign-positionPOST
membership:status:change修改成员状态/memberships/{membershipId}/change-statusPOST
membership:batch-change-status批量修改成员状态/memberships/batch-change-statusPOST
membership:batch-create批量创建成员/memberships/batch-createPOST
membership:force-exit强制退社/memberships/{membershipId}/force-exitPOST

招新系统

权限编码权限名称路径方法
recruitment-campaign:list查询招新计划/clubs/{clubId}/recruitment-campaignsGET
recruitment-campaign:create创建招新计划/clubs/{clubId}/recruitment-campaignsPOST
recruitment-campaign:detail获取招新计划详情/recruitment-campaigns/{campaignId}GET
recruitment-campaign:update更新招新计划/recruitment-campaigns/{campaignId}PATCH
recruitment-campaign:publish发布招新计划/recruitment-campaigns/{campaignId}/publishPOST
recruitment-campaign:close关闭招新计划/recruitment-campaigns/{campaignId}/closePOST
application:list查询入会申请/applicationsGET
application:create提交入会申请/applicationsPOST
application:export导出入会申请/applications/exportGET
application:detail获取入会申请详情/applications/{applicationId}GET
application:update更新入会申请/applications/{applicationId}PATCH
application:submit提交草稿申请/applications/{applicationId}/submitPOST
application:withdraw撤回入会申请/applications/{applicationId}/withdrawPOST
application:approve审批入会申请/applications/{applicationId}/approvalsPOST
application:batch-approve批量审批入会申请/applications/batch-approvalsPOST
application:final-decision终审决策/applications/{applicationId}/final-decisionsPOST
approval-record:list查询审批记录/applications/{applicationId}/approval-recordsGET
exit-application:list查询退社申请/exit-applicationsGET
exit-application:create提交退社申请/exit-applicationsPOST
exit-application:detail获取退社申请详情/exit-applications/{exitApplicationId}GET
exit-application:approve通过退社申请/exit-applications/{exitApplicationId}/approvePOST
exit-application:reject驳回退社申请/exit-applications/{exitApplicationId}/rejectPOST

面试管理

权限编码权限名称路径方法
interview:list查询面试列表/interviewsGET
interview:create创建面试安排/interviewsPOST
interview:detail获取面试详情/interviews/{interviewId}GET
interview:update更新面试安排/interviews/{interviewId}PATCH
interview:confirm确认面试/interviews/{interviewId}/confirmPOST
interview:feedback提交面试反馈/interviews/{interviewId}/feedbackPOST
interview:complete完成面试/interviews/{interviewId}/completePOST

活动与签到

权限编码权限名称路径方法
activity:list查询活动列表/activitiesGET
activity:create创建活动/activitiesPOST
activity:detail获取活动详情/activities/{activityId}GET
activity:update更新活动/activities/{activityId}PATCH
activity:delete删除活动/activities/{activityId}DELETE
activity-registration:list查询活动报名/activities/{activityId}/registrationsGET
check-in:list查询内部签到/check-insGET
check-in:detail获取内部签到详情/check-ins/{sessionId}GET
check-in:create发布内部签到/check-insPOST
check-in:update更新内部签到/check-ins/{sessionId}PATCH
check-in:delete删除内部签到/check-ins/{sessionId}DELETE
check-in:records查询内部签到记录/check-ins/{sessionId}/recordsGET
check-in:group-member-delete移除签到分组成员/check-in-groups/{groupId}/members/{userId}DELETE
award:list查询获奖经历/awardsGET
award:create创建获奖经历/awardsPOST
award:update更新获奖经历/awards/{awardId}PATCH
award:delete删除获奖经历/awards/{awardId}DELETE
school-calendar:manage管理校历/school-calendarPOST

请假管理

权限编码权限名称路径方法
leave-application:list查询请假申请/leave-applicationsGET
leave-application:detail获取请假详情/leave-applications/{leaveApplicationId}GET
leave-application:review审批请假申请/leave-applications/{leaveApplicationId}/reviewPOST
leave-application:delete删除请假申请/leave-applications/{leaveApplicationId}DELETE

规章制度

权限编码权限名称路径方法
regulation:list查询社团规章制度/regulationsGET
regulation:create创建社团规章制度/clubs/{clubId}/regulationsPOST
regulation:update更新社团规章制度/regulations/{regulationId}PATCH
regulation:delete删除社团规章制度/regulations/{regulationId}DELETE

表单与文书

权限编码权限名称路径方法
site-form:list查询信息收集表单/site-formsGET
site-form:create新增信息收集表单/site-formsPOST
site-form:detail获取表单详情/site-forms/{formId}GET
site-form:update更新信息收集表单/site-forms/{formId}PATCH
site-form:export导出表单提交数据/site-forms/{formId}/submissions/exportGET
document:list查询文书列表/office-documentsGET
document:create创建文书/office-documentsPOST
document:update更新文书/office-documents/{documentId}PATCH
document:export导出文书/office-documents/{documentId}/exportGET

互动功能

权限编码权限名称路径方法
blog:my:list查询我的博客/blog/my/articlesGET
blog:create发布博客文章/blog/articlesPOST
blog:update-own更新自己的博客文章/blog/articles/{articleId}PATCH
blog:delete-own删除自己的博客文章/blog/articles/{articleId}DELETE
blog:list管理博客文章/blog/admin/articlesGET
blog:review审核博客文章/blog/admin/articles/{articleId}/reviewPOST
blog:delete删除博客文章/blog/admin/articles/{articleId}DELETE
blog-comment:list查询博客评论/blog/admin/articles/{articleId}/commentsGET
blog-comment:manage管理博客评论/blog/admin/comments/{commentId}/statusPATCH
blog-interaction:list查询博客互动记录/blog/admin/interactionsGET
lottery:list查询抽奖活动/lotteriesGET
lottery:create创建抽奖活动/clubs/{clubId}/lotteriesPOST
lottery:detail获取抽奖详情/lotteries/{lotteryId}GET
lottery:update更新抽奖活动/lotteries/{lotteryId}PATCH
lottery:draw执行抽奖/lotteries/{lotteryId}/drawPOST
vote:list查询投票活动/votesGET
vote:create创建投票活动/clubs/{clubId}/votesPOST
vote:detail获取投票详情/votes/{voteId}GET
vote:update更新投票活动/votes/{voteId}PATCH
vote:manage-records管理投票记录/votes/{voteId}/resetPOST

积分系统

权限编码权限名称路径方法
point:account:list查询积分账户/points/admin/accountsGET
point:transaction:list查询积分流水/points/admin/transactionsGET
point:adjust手动调整积分/points/admin/adjustmentsPOST
point:item:list查询积分兑换项/points/admin/itemsGET
point:item:manage管理积分兑换项/points/admin/items/**POST
point:redemption:list查询积分兑换记录/points/admin/redemptionsGET
point:redemption:manage处理积分兑换记录/points/admin/redemptions/{redemptionId}/statusPATCH

通知与图床

权限编码权限名称路径方法
notification:list查询通知/notificationsGET
notification:create发送通知/notificationsPOST
notification:read标记通知已读/notifications/{notificationId}/readPOST
notification:delete删除通知/notifications/admin/{notificationId}DELETE
image:upload上传图床图片/image-hosting/imagesPOST
image:list管理图床图片/image-hosting/admin/imagesGET
image:delete删除图床图片/image-hosting/admin/images/{imageId}DELETE

OAuth 与数据开放

权限编码权限名称路径方法
oauth-client:list查询认证应用/oauth/admin/clientsGET
oauth-client:manage管理认证应用/oauth/admin/clients/**POST
data-open:list查询数据开放申请/data-open/admin/applicationsGET
data-open:review审核数据开放申请/data-open/admin/applications/{applicationId}/reviewPOST

展示与日志

权限编码权限名称路径方法
showcase-app:list查询应用展示/showcase-appsGET
showcase-app:manage管理应用展示/showcase-apps/**POST
showcase-app:delete删除应用展示/showcase-apps/{appId}DELETE
log:operation:list查询操作日志/operation-logsGET
log:login:list查询登录日志/login-logsGET

QQ 机器人

权限编码权限名称路径方法
bot-management:list查看 QQ 机器人群管后台/bot-management/**GET
bot-management:detail查看 QQ 群详情/bot-management/groups/{groupId}GET
bot-management:members查看 QQ 群成员/bot-management/groups/{groupId}/membersGET
bot-management:sync同步 QQ 群与成员/bot-management/groups/**/syncPOST
bot-management:config配置 QQ 群机器人/bot-management/groups/**/configPATCH
bot-management:mute执行 QQ 群禁言/bot-management/groups/**/mute*POST
bot-management:messages发送 QQ 群消息/bot-management/groups/{groupId}/messages/**POST
bot-management:announcements管理 QQ 群公告/bot-management/groups/{groupId}/announcements/**POST
bot-management:join-requests处理 QQ 入群申请/bot-management/groups/{groupId}/join-requests/**POST
bot-management:sensitive-words管理 QQ 群敏感词/bot-management/sensitive-words/**POST
bot-management:auto-review管理 QQ 自动审核规则/bot-management/auto-review-rules/**POST
bot-management:statistics查看 QQ 群统计/bot-management/statistics/**GET