feat(audit): 收口领域写接口权限审计

apps/server/src/modules/task-worklog/task-worklog.controller.ts

@@ -1,4 +1,5 @@
 import { Body, Controller, Delete, Get, Param, Post } from '@nestjs/common';
+import { ProtectedMutation } from '../../common/audit/protected-mutation.decorator';
 import { CreateTaskWorklogDto } from './dto/create-task-worklog.dto';
 import { TaskWorklogService } from './task-worklog.service';
 
@@ -12,11 +13,21 @@ export class TaskWorklogController {
   }
 
   @Post()
+  @ProtectedMutation('version.devtask:manage', { versionIdBody: 'versionId' }, {
+    action: 'task_worklog.create',
+    entityType: 'task_worklog',
+    versionIdBody: 'versionId',
+  })
   create(@Body() dto: CreateTaskWorklogDto) {
     return this.taskWorklogService.create(dto);
   }
 
   @Delete(':id')
+  @ProtectedMutation('version.devtask:manage', {}, {
+    action: 'task_worklog.delete',
+    entityType: 'task_worklog',
+    entityIdParam: 'id',
+  })
   remove(@Param('id') id: string) {
     return this.taskWorklogService.remove(id);
   }