feat: add governance bootstrap models

backend/apps/accounts/permissions.py

@@ -5,30 +5,39 @@ from dataclasses import dataclass
 class PermissionSpec:
     codename: str
     name: str
+    module: str
 
 
 PERMISSIONS: tuple[PermissionSpec, ...] = (
-    PermissionSpec("ticket.view", "View tickets"),
-    PermissionSpec("ticket.create", "Create tickets"),
-    PermissionSpec("ticket.edit", "Edit tickets"),
-    PermissionSpec("ticket.export", "Export tickets"),
-    PermissionSpec("ticket.assign", "Assign tickets"),
-    PermissionSpec("ticket.close", "Close tickets"),
-    PermissionSpec("knowledge.view", "View knowledge"),
-    PermissionSpec("knowledge.manage", "Manage knowledge"),
-    PermissionSpec("solution.view", "View solutions"),
-    PermissionSpec("solution.manage", "Manage solutions"),
-    PermissionSpec("agent.use", "Use Agents"),
-    PermissionSpec("agent.manage", "Manage Agents"),
-    PermissionSpec("model.manage", "Manage model configs"),
-    PermissionSpec("tool.manage", "Manage MCP tools"),
-    PermissionSpec("audit.view", "View audit logs"),
-    PermissionSpec("system.manage", "Manage system settings"),
+    PermissionSpec("ticket.view", "查看工单", "工单"),
+    PermissionSpec("ticket.create", "创建工单", "工单"),
+    PermissionSpec("ticket.edit", "编辑工单", "工单"),
+    PermissionSpec("ticket.export", "导出工单", "工单"),
+    PermissionSpec("ticket.assign", "分派工单", "工单"),
+    PermissionSpec("ticket.close", "关闭工单", "工单"),
+    PermissionSpec("solution.view", "查看解决方案", "解决方案"),
+    PermissionSpec("solution.manage", "管理解决方案", "解决方案"),
+    PermissionSpec("knowledge.view", "查看知识库", "知识库"),
+    PermissionSpec("knowledge.manage", "管理知识库", "知识库"),
+    PermissionSpec("agent.use", "使用 Agent", "AI 平台"),
+    PermissionSpec("agent.manage", "管理 Agent", "AI 平台"),
+    PermissionSpec("model.manage", "管理模型配置", "AI 平台"),
+    PermissionSpec("tool.manage", "管理 MCP 工具", "AI 平台"),
+    PermissionSpec("system.user.view", "查看用户", "系统治理"),
+    PermissionSpec("system.user.manage", "管理用户", "系统治理"),
+    PermissionSpec("system.user_group.view", "查看用户组", "系统治理"),
+    PermissionSpec("system.user_group.manage", "管理用户组", "系统治理"),
+    PermissionSpec("system.role.view", "查看角色权限", "系统治理"),
+    PermissionSpec("system.role.manage", "管理角色权限", "系统治理"),
+    PermissionSpec("system.menu.view", "查看菜单权限", "系统治理"),
+    PermissionSpec("system.menu.manage", "管理菜单权限", "系统治理"),
+    PermissionSpec("system.audit.view", "查看操作审计", "系统治理"),
+    PermissionSpec("system.setting.manage", "管理系统设置", "系统治理"),
 )
 
 DEFAULT_GROUPS: dict[str, tuple[str, ...]] = {
-    "System Admin": tuple(permission.codename for permission in PERMISSIONS),
-    "Knowledge Admin": (
+    "系统管理员": tuple(permission.codename for permission in PERMISSIONS),
+    "知识库管理员": (
         "ticket.view",
         "knowledge.view",
         "knowledge.manage",
@@ -36,7 +45,7 @@ DEFAULT_GROUPS: dict[str, tuple[str, ...]] = {
         "solution.manage",
         "agent.use",
     ),
-    "Support Engineer": (
+    "技术支持": (
         "ticket.view",
         "ticket.create",
         "ticket.edit",
@@ -46,16 +55,16 @@ DEFAULT_GROUPS: dict[str, tuple[str, ...]] = {
         "solution.view",
         "agent.use",
     ),
-    "Requester": (
+    "普通建单人": (
         "ticket.view",
         "ticket.create",
         "knowledge.view",
         "solution.view",
     ),
-    "Auditor": (
+    "只读审计员": (
         "ticket.view",
         "knowledge.view",
         "solution.view",
-        "audit.view",
+        "system.audit.view",
     ),
 }