Method CreateUser

pkg/security/access_control.go:312–356

CreateUser 创建用户

(user *User)

// CreateUser 创建用户
func (ac *AccessController) CreateUser(user *User) error {
	ac.mu.Lock()
	defer ac.mu.Unlock()

	if user.ID == "" {
		return errors.New("user ID is required")
	}

	if _, exists := ac.users[user.ID]; exists {
		return fmt.Errorf("user %s already exists", user.ID)
	}

	if user.Username == "" {
		return errors.New("username is required")
	}

	// 检查用户名是否已存在
	for _, existingUser := range ac.users {
		if existingUser.Username == user.Username {
			return fmt.Errorf("username %s already exists", user.Username)
		}
	}

	// 设置默认值
	if user.Status == "" {
		user.Status = UserStatusActive
	}
	user.Enabled = true
	user.CreatedAt = time.Now()
	user.UpdatedAt = time.Now()

	ac.users[user.ID] = user

	// 记录审计日志
	if ac.config.EnableAudit && ac.auditLog != nil {
		_ = ac.auditLog.LogEvent(AuditEvent{
			Type:      AuditTypeUserCreated,
			UserID:    user.ID,
			Timestamp: time.Now(),
			Message:   fmt.Sprintf("User %s (%s) created", user.ID, user.Username),
		})
	}

	return nil
}

// GetUser 获取用户
func (ac *AccessController) GetUser(userID string) (*User, error) {