修复考勤管理bug并加强了信息保护

backend/routes/admin.py

@@ -87,7 +87,7 @@ async def import_students(request: Request, file: UploadFile = File(...)):
         initial_points=60
     )
     await LogService.write_operation_log(
-        operator_id=user["user_id"], operator_name=user["username"],
+        operator_id=user["user_id"], operator_name=user["real_name"],
         operator_role="班主任", operation_type="import_students",
         target_type="student",
         details=f"批量导入: 成功{result['success_count']}人, 失败{result['failed_count']}人",
@@ -113,7 +113,7 @@ async def add_student(request: Request, req: AddStudentRequest):
     )
     if result["success"]:
         await LogService.write_operation_log(
-            operator_id=user["user_id"], operator_name=user["username"],
+            operator_id=user["user_id"], operator_name=user["real_name"],
             operator_role="班主任", operation_type="add_student",
             target_type="student", target_id=result.get("student_id"),
             details=f"新增学生: {req.name}({req.student_no})",
@@ -192,7 +192,7 @@ async def add_conduct_points(request: Request, req: AddPointsRequest):
     if result["success"]:
         role = await PermissionChecker.get_user_role(user["user_id"])
         await LogService.write_operation_log(
-            operator_id=user["user_id"], operator_name=user["username"],
+            operator_id=user["user_id"], operator_name=user["real_name"],
             operator_role=role, operation_type="add_points",
             target_type="conduct",
             details=f"批量加减分: {req.points_change}分, 原因: {req.reason}, 对象: {req.student_ids}",
@@ -215,7 +215,7 @@ async def revoke_conduct_record(request: Request, req: RevokeRequest):
         role = await PermissionChecker.get_user_role(user["user_id"])
         record = result.get("record", {})
         await LogService.write_operation_log(
-            operator_id=user["user_id"], operator_name=user["username"],
+            operator_id=user["user_id"], operator_name=user["real_name"],
             operator_role=role, operation_type="revoke_record",
             target_type="conduct", target_id=req.record_id,
             details=(
@@ -242,7 +242,7 @@ async def restore_conduct_record(request: Request, req: RevokeRequest):
     if result["success"]:
         record = result.get("record", {})
         await LogService.write_operation_log(
-            operator_id=user["user_id"], operator_name=user["username"],
+            operator_id=user["user_id"], operator_name=user["real_name"],
             operator_role="班主任", operation_type="restore_record",
             target_type="conduct", target_id=req.record_id,
             details=(
@@ -266,7 +266,8 @@ async def get_conduct_history(
     page_size: int = Query(20, ge=1, le=1000),
     start_date: Optional[str] = None,
     end_date: Optional[str] = None,
-    grouped: bool = Query(False)
+    grouped: bool = Query(False),
+    related_type: Optional[str] = None
 ):
     """获取操行分历史记录"""
     try:
@@ -278,7 +279,8 @@ async def get_conduct_history(
             page_size=page_size,
             start_date=start_date,
             end_date=end_date,
-            grouped=grouped
+            grouped=grouped,
+            related_type=related_type
         )
         return success_response(data=result)
     except Exception as e:
@@ -335,7 +337,7 @@ async def create_assignment(
     )
     if result["success"]:
         await LogService.write_operation_log(
-            operator_id=user["user_id"], operator_name=user["username"],
+            operator_id=user["user_id"], operator_name=user["real_name"],
             operator_role="班主任", operation_type="create_assignment",
             target_type="homework",
             details=f"发布作业: {title}",
@@ -362,7 +364,7 @@ async def update_submission_status(request: Request, req: UpdateHomeworkStatusRe
     )
     if result["success"]:
         await LogService.write_operation_log(
-            operator_id=user["user_id"], operator_name=user["username"],
+            operator_id=user["user_id"], operator_name=user["real_name"],
             operator_role=role, operation_type="update_submission",
             target_type="homework", target_id=req.submission_id,
             details=f"状态: {req.status}",
@@ -393,7 +395,7 @@ async def add_attendance(request: Request, req: AddAttendanceRequest):
     )
     if result["success"]:
         await LogService.write_operation_log(
-            operator_id=user["user_id"], operator_name=user["username"],
+            operator_id=user["user_id"], operator_name=user["real_name"],
             operator_role=role, operation_type="add_attendance",
             target_type="attendance",
             details=f"学生ID: {req.student_id}, 日期: {req.date}, 状态: {req.status}",
@@ -440,7 +442,7 @@ async def add_admin(request: Request, req: AddAdminRequest):
     )
     if result["success"]:
         await LogService.write_operation_log(
-            operator_id=user["user_id"], operator_name=user["username"],
+            operator_id=user["user_id"], operator_name=user["real_name"],
             operator_role="班主任", operation_type="add_admin",
             target_type="admin",
             details=f"新增管理员: {req.real_name}({req.username}), 角色: {req.role_type}",
@@ -477,16 +479,24 @@ async def update_admin(request: Request, user_id: int, req: UpdateAdminRequest):
         return error_response(message="无效的角色类型", code=400)
     
     from models.admin_role import AdminRoleModel
+    from models.user import UserModel
+    
+    # 更新角色
     result = await AdminRoleModel.update_role(
         user_id=user_id,
         role_type=req.role_type
     )
+    
+    # 更新姓名
+    if req.real_name:
+        await UserModel.update_real_name(user_id, req.real_name)
+    
     if result:
         await LogService.write_operation_log(
-            operator_id=user["user_id"], operator_name=user["username"],
+            operator_id=user["user_id"], operator_name=user["real_name"],
             operator_role="班主任", operation_type="update_admin",
             target_type="admin", target_id=user_id,
-            details=f"更新管理员角色为: {req.role_type}",
+            details=f"更新管理员角色为: {req.role_type}, 姓名: {req.real_name}",
             ip=request.client.host
         )
         return success_response(message="管理员更新成功")
@@ -515,7 +525,7 @@ async def delete_admin(request: Request, user_id: int):
         # 再删除用户账号（软删除，将状态设为禁用）
         await UserModel.update_status(user_id, 0)
         await LogService.write_operation_log(
-            operator_id=user["user_id"], operator_name=user["username"],
+            operator_id=user["user_id"], operator_name=user["real_name"],
             operator_role="班主任", operation_type="delete_admin",
             target_type="admin", target_id=user_id,
             details=f"删除管理员: ID={user_id}",
@@ -548,7 +558,7 @@ async def reset_admin_password(request: Request, user_id: int, req: ResetPasswor
     updated = await UserModel.update_password(user_id, req.new_password)
     if updated:
         await LogService.write_operation_log(
-            operator_id=user["user_id"], operator_name=user["username"],
+            operator_id=user["user_id"], operator_name=user["real_name"],
             operator_role="班主任", operation_type="reset_password",
             target_type="admin", target_id=user_id,
             details=f"重置管理员密码: {target_user['real_name']}({target_user['username']})",

backend/routes/semester.py

@@ -67,7 +67,7 @@ async def create_semester(request: Request, req: CreateSemesterRequest):
     )
     if result["success"]:
         await LogService.write_operation_log(
-            operator_id=user["user_id"], operator_name=user["username"],
+            operator_id=user["user_id"], operator_name=user["real_name"],
             operator_role="班主任", operation_type="create_semester",
             target_type="semester", target_id=result.get("semester_id"),
             details=f"创建学期: {req.semester_name}",
@@ -92,7 +92,7 @@ async def activate_semester(request: Request, semester_id: int):
     )
     if result["success"]:
         await LogService.write_operation_log(
-            operator_id=user["user_id"], operator_name=user["username"],
+            operator_id=user["user_id"], operator_name=user["real_name"],
             operator_role="班主任", operation_type="activate_semester",
             target_type="semester", target_id=semester_id,
             details=f"激活学期ID: {semester_id}",
@@ -120,7 +120,7 @@ async def update_semester(request: Request, semester_id: int, req: UpdateSemeste
     )
     if result["success"]:
         await LogService.write_operation_log(
-            operator_id=user["user_id"], operator_name=user["username"],
+            operator_id=user["user_id"], operator_name=user["real_name"],
             operator_role="班主任", operation_type="update_semester",
             target_type="semester", target_id=semester_id,
             details=f"编辑学期ID: {semester_id}",
@@ -145,7 +145,7 @@ async def delete_semester(request: Request, semester_id: int):
     )
     if result["success"]:
         await LogService.write_operation_log(
-            operator_id=user["user_id"], operator_name=user["username"],
+            operator_id=user["user_id"], operator_name=user["real_name"],
             operator_role="班主任", operation_type="delete_semester",
             target_type="semester", target_id=semester_id,
             details=f"删除学期ID: {semester_id}",
@@ -170,7 +170,7 @@ async def associate_records(request: Request, semester_id: int):
     )
     if result["success"]:
         await LogService.write_operation_log(
-            operator_id=user["user_id"], operator_name=user["username"],
+            operator_id=user["user_id"], operator_name=user["real_name"],
             operator_role="班主任", operation_type="associate_records",
             target_type="semester", target_id=semester_id,
             details=f"关联数据到学期ID: {semester_id}, 结果: {result.get('data', {})}",
@@ -203,7 +203,7 @@ async def archive_semester(
         if reset_scores:
             log_detail += " 并重置学生操行分"
         await LogService.write_operation_log(
-            operator_id=user["user_id"], operator_name=user["username"],
+            operator_id=user["user_id"], operator_name=user["real_name"],
             operator_role="班主任", operation_type="archive_semester",
             target_type="semester", target_id=semester_id,
             details=log_detail,