Users RPC transition

config/settings/common_settings.py

@@ -81,6 +81,7 @@ def pipe_delim(pipe_string):
     'mathesar.rpc.tables',
     'mathesar.rpc.tables.metadata',
     'mathesar.rpc.tables.privileges',
+    'mathesar.rpc.users'
 ]
 
 TEMPLATES = [

mathesar/api/viewsets/data_files.py

@@ -24,7 +24,7 @@ class DataFileViewSet(viewsets.GenericViewSet, ListModelMixin, RetrieveModelMixi
     filterset_class = DataFileFilter
     parser_classes = [MultiPartParser, JSONParser]
 
-    def partial_update(self, request, pk=None):
+    def partial_update(self, request, **kwargs):
         serializer = DataFileSerializer(
             data=request.data, context={'request': request}, partial=True
         )

mathesar/rpc/users.py

@@ -0,0 +1,140 @@
+"""
+Classes and functions exposed to the RPC endpoint for managing mathesar users.
+"""
+from typing import Optional, TypedDict
+from modernrpc.core import rpc_method, REQUEST_KEY
+from modernrpc.auth.basic import (
+    http_basic_auth_login_required,
+    http_basic_auth_superuser_required
+)
+
+from mathesar.rpc.exceptions.handlers import handle_rpc_exceptions
+from modernrpc.exceptions import AuthenticationFailed
+from mathesar.utils.users import (
+    get_user,
+    list_users,
+    add_user,
+    update_user_info,
+    delete_user,
+    change_password,
+    revoke_password
+)
+
+
+class UserInfo(TypedDict):
+    id: int
+    username: str
+    is_superuser: bool
+    email: str
+    full_name: str
+    short_name: str
+    display_language: str
+
+    @classmethod
+    def from_model(cls, model):
+        return cls(
+            id=model.id,
+            username=model.username,
+            is_superuser=model.is_superuser,
+            email=model.email,
+            full_name=model.full_name,
+            short_name=model.short_name,
+            display_language=model.display_language
+        )
+
+
+class UserDef(TypedDict):
+    username: str
+    password: str
+    is_superuser: bool
+    email: Optional[str]
+    full_name: Optional[str]
+    short_name: Optional[str]
+    display_language: Optional[str]
+
+
+class SettableUserInfo(TypedDict):
+    username: Optional[str]
+    is_superuser: Optional[bool]
+    email: Optional[str]
+    full_name: Optional[str]
+    short_name: Optional[str]
+    display_language: Optional[str]
+
+
+@rpc_method(name='users.add')
+@http_basic_auth_superuser_required
+@handle_rpc_exceptions
+def add(*, user_def: UserDef) -> UserInfo:
+    user = add_user(user_def)
+    return UserInfo.from_model(user)
+
+
+@rpc_method(name='users.delete')
+@http_basic_auth_superuser_required
+@handle_rpc_exceptions
+def delete(*, user_id: int) -> None:
+    delete_user(user_id)
+
+
+@rpc_method(name="users.get")
+@http_basic_auth_login_required
+@handle_rpc_exceptions
+def get(*, user_id: int) -> UserInfo:
+    user = get_user(user_id)
+    return UserInfo.from_model(user)
+
+
+@rpc_method(name='users.list')
+@http_basic_auth_login_required
+@handle_rpc_exceptions
+def list_() -> list[UserInfo]:
+    users = list_users()
+    return [UserInfo.from_model(user) for user in users]
+
+
+@rpc_method(name='users.patch')
+@http_basic_auth_login_required
+@handle_rpc_exceptions
+def patch(
+    *,
+    user_id: int,
+    user_info: SettableUserInfo,
+    **kwargs
+) -> UserInfo:
+    user = kwargs.get(REQUEST_KEY).user
+    if not (user.id == user_id or user.is_superuser):
+        raise AuthenticationFailed('users.patch')
+    updated_user_info = update_user_info(
+        user_id,
+        user_info,
+        requesting_user=user
+    )
+    return UserInfo.from_model(updated_user_info)
+
+
+@rpc_method(name='users.password.replace_own')
+@http_basic_auth_login_required
+@handle_rpc_exceptions
+def replace_own(
+    *,
+    user_id: int,
+    old_password: str,
+    new_password: str,
+    **kwargs
+) -> None:
+    user = kwargs.get(REQUEST_KEY).user
+    if not user.id == user_id:
+        raise AuthenticationFailed('users.password.replace_own')
+    change_password(user_id, old_password, new_password)
+
+
+@rpc_method(name='users.password.revoke')
+@http_basic_auth_superuser_required
+@handle_rpc_exceptions
+def revoke(
+    *,
+    user_id: int,
+    new_password: str,
+) -> None:
+    revoke_password(user_id, new_password)