新增后台数据库备份与回滚

backend/app/api/routes/admin_pdf_cleanup.py

@@ -1,7 +1,7 @@
 from fastapi import APIRouter, Depends, HTTPException, status
 from sqlalchemy.orm import Session
 
-from app.api.deps import get_current_admin
+from app.api.deps import get_current_admin, require_roles
 from app.db.session import get_db
 from app.models import AdminUser
 from app.services.pdf_cleanup import (
@@ -23,29 +23,18 @@ def get_pdf_stats(
 
 @router.post("/cleanup")
 def trigger_cleanup(
-    current_admin: AdminUser = Depends(get_current_admin),
+    _: AdminUser = Depends(require_roles("system_admin")),
 ) -> dict:
     """手动触发PDF清理"""
-    if current_admin.role_code != "admin":
-        raise HTTPException(
-            status_code=status.HTTP_403_FORBIDDEN,
-            detail="只有管理员可以执行此操作",
-        )
     return cleanup_expired_pdfs()
 
 
 @router.post("/cleanup/{certificate_no}")
 def cleanup_single_certificate(
     certificate_no: str,
-    current_admin: AdminUser = Depends(get_current_admin),
+    _: AdminUser = Depends(require_roles("system_admin")),
 ) -> dict:
     """手动清理指定证书的PDF"""
-    if current_admin.role_code != "admin":
-        raise HTTPException(
-            status_code=status.HTTP_403_FORBIDDEN,
-            detail="只有管理员可以执行此操作",
-        )
-
     success = manual_cleanup_certificate(certificate_no)
     if success:
         return {"message": f"证书 {certificate_no} 的PDF已清理"}