【数据存储】日志脱敏：敏感字段的存储规范

---敏感字段的掩码规则
local MASK_RULES = {
    phone = function(v) return string.sub(v, 1, 3) .. "****" .. string.sub(v, -4) end,
    name = function(v) return string.sub(v, 1, 1) .. string.rep("*", #v - 1) end,
    order = function(v) return string.sub(v, 1, 6) .. "****" end,
}
function LogWrite.masked(kind, fields)
    local masked = {}
    for k, v in pairs(fields) do
        local rule = MASK_RULES[k]
        masked[k] = rule and rule(v) or v
    end
    QF_AppendLog(kind, masked)
end

---查询的权限校验与二次脱敏
function LogQuery.search(operator, kind, key)
    if not LogQuery.hasPerm(operator, kind) then return nil, "无权限" end
    local rows = QF_SearchLog(kind, key)
    if not LogQuery.isAuditor(operator) then
        for _, r in ipairs(rows) do
            r.phone = MASK_RULES.phone(r.phone)
        end
    end
    return rows
end