Dev

src/conode/application/manage_profile/__init__.py

@@ -2,8 +2,14 @@
     UpdateCurrentUserProfileInteractor,
     UpdateCurrentUserProfileRequestDTO,
 )
+from .update_user_profile import (
+    UpdateUserProfileInteractor,
+    UpdateUserProfileRequestDTO,
+)
 
 __all__ = (
     "UpdateCurrentUserProfileInteractor",
     "UpdateCurrentUserProfileRequestDTO",
+    "UpdateUserProfileInteractor",
+    "UpdateUserProfileRequestDTO",
 )

src/conode/application/manage_profile/update_current_user_profile.py

@@ -29,3 +29,5 @@ async def execute(self, request: UpdateCurrentUserProfileRequestDTO) -> None:
                 username=request.username,
                 bio=request.bio,
             )
+
+            await self.user_repository.update(user)

src/conode/application/manage_profile/update_user_profile.py

@@ -0,0 +1,44 @@
+from dataclasses import dataclass
+
+from conode.application.interfaces.repositories import UserRepository
+from conode.application.interfaces.transaction_manager import TransactionManager
+from conode.application.services.access_control import AccessControlService
+from conode.domain.user import UserId
+
+
+@dataclass(frozen=True, slots=True, kw_only=True)
+class UpdateUserProfileRequestDTO:
+    first_name: str
+    last_name: str
+    username: str
+    bio: str
+
+
+@dataclass
+class UpdateUserProfileInteractor:
+    access_control_service: AccessControlService
+    transaction_manager: TransactionManager
+    user_repository: UserRepository
+
+    async def execute(
+        self, user_id: UserId, request: UpdateUserProfileRequestDTO
+    ) -> None:
+        async with self.transaction_manager:
+            user = await self.access_control_service.get_authorized_user()
+
+            if user.id == user_id:
+                target = user
+            else:
+                self.access_control_service.ensure_user_can_manipulate_user_profiles(
+                    user
+                )
+                target = await self.user_repository.get_by_id(user_id)
+
+            target.update_profile(
+                username=request.username,
+                first_name=request.first_name,
+                last_name=request.last_name,
+                bio=request.bio,
+            )
+
+            await self.user_repository.update(target)

src/conode/application/services/access_control.py

@@ -24,7 +24,7 @@
     RolePermission,
     RolePermissionEntityId,
 )
-from conode.domain.user import Email, User, UserId
+from conode.domain.user import Email, User, UserId, UserSystemRole
 
 type RolesPermissions = list[RolePermission]
 
@@ -289,3 +289,7 @@ async def ensure_user_can_manipulate_groups(
                 raise NotEnoughRightsError(
                     "Not enough rights to perform operation", None
                 )
+
+    def ensure_user_can_manipulate_user_profiles(self, user: User) -> None:
+        if user.system_role != UserSystemRole.ADMIN:
+            raise NotEnoughRightsError("Not enough rights to perform operation", None)

src/conode/bootstrap/di/providers/application.py

@@ -13,7 +13,10 @@
 from conode.application.manage_edge import CreateEdgeInteractor, DeleteEdgeInteractor
 from conode.application.manage_group import CreateGroupInteractor, DeleteGroupInteractor
 from conode.application.manage_node import CreateNodeInteractor, DeleteNodeInteractor
-from conode.application.manage_profile import UpdateCurrentUserProfileInteractor
+from conode.application.manage_profile import (
+    UpdateCurrentUserProfileInteractor,
+    UpdateUserProfileInteractor,
+)
 from conode.application.manage_role import (
     CreateRoleInteractor,
     DeleteRoleInteractor,
@@ -63,41 +66,42 @@
 
 class ApplicationProvider(Provider):
     provides = provide_all(
-        UpdateNodeInteractor,
-        AccessControlService,
-        OfferAcceptanceService,
-        OfferSendingService,
-        DeleteEdgeInteractor,
-        UpdateEdgeWeightInteractor,
-        IncrementEdgeWeightInteractor,
-        GetGroupByIdInteractor,
-        GetContextByIdInteractor,
         UpdateCurrentUserProfileInteractor,
-        SendOfferToCompanyInteractor,
+        IncrementEdgeWeightInteractor,
         DecrementEdgeWeightInteractor,
+        SendOfferToCompanyInteractor,
+        RevokeRoleFromUserInteractor,
+        UpdateUserProfileInteractor,
+        GetNodeNeighboursInteractor,
         GetUserByUsernameInteractor,
+        UpdateEdgeWeightInteractor,
         FindShortestPathInteractor,
         GetNodesByGroupInteractor,
         RegisterCompanyInteractor,
         GetCurrentUserInteractor,
-        CreateContextInteractor,
+        GetContextByIdInteractor,
+        GiveRoleToUserInteractor,
         VerifyCompanyInteractor,
         DeleteContextInteractor,
+        CreateContextInteractor,
+        OfferAcceptanceService,
+        GetGroupByIdInteractor,
+        DeclineOfferInteractor,
+        AcceptOfferInteractor,
         CreateGroupInteractor,
         DeleteGroupInteractor,
+        UpdateNodeInteractor,
+        AccessControlService,
+        DeleteEdgeInteractor,
         CreateNodeInteractor,
         DeleteRoleInteractor,
         RoleManagmentService,
         UpdateRoleInteractor,
         DeleteNodeInteractor,
-        AcceptOfferInteractor,
-        DeclineOfferInteractor,
         DetachNodeInteractor,
-        GetNodeNeighboursInteractor,
         CreateRoleInteractor,
         AttachNodeInteractor,
         CreateEdgeInteractor,
-        GiveRoleToUserInteractor,
-        RevokeRoleFromUserInteractor,
+        OfferSendingService,
         scope=Scope.REQUEST,
     )

src/conode/presentation/schemas/user.py

@@ -37,7 +37,31 @@ class UpdateCurrentUserProfileRequest(BaseModel):
             max_length=MAX_ALLOWED_LAST_NAME_LENGTH,
         ),
     ]
-    password: Annotated[str, Field(min_length=7, max_length=100)]
+    bio: Annotated[str, Field(max_length=MAX_ALLOWED_BIO_LENGTH)]
+
+
+class UpdateUserProfileRequest(BaseModel):
+    username: Annotated[
+        str,
+        Field(
+            min_length=MIN_ALLOWED_USERNAME_LENGTH,
+            max_length=MAX_ALLOWED_USERNAME_LENGTH,
+        ),
+    ]
+    first_name: Annotated[
+        str,
+        Field(
+            min_length=MIN_ALLOWED_FIRST_NAME_LENGTH,
+            max_length=MAX_ALLOWED_FIRST_NAME_LENGTH,
+        ),
+    ]
+    last_name: Annotated[
+        str,
+        Field(
+            min_length=MIN_ALLOWED_LAST_NAME_LENGTH,
+            max_length=MAX_ALLOWED_LAST_NAME_LENGTH,
+        ),
+    ]
     bio: Annotated[str, Field(max_length=MAX_ALLOWED_BIO_LENGTH)]
 
 

src/conode/presentation/views/user.py

@@ -6,6 +6,8 @@
 from conode.application.manage_profile import (
     UpdateCurrentUserProfileInteractor,
     UpdateCurrentUserProfileRequestDTO,
+    UpdateUserProfileInteractor,
+    UpdateUserProfileRequestDTO,
 )
 from conode.application.manage_user_rights import (
     GiveRoleToUserInteractor,
@@ -19,6 +21,7 @@
 from conode.domain.user import UserId
 from conode.presentation.schemas.user import (
     UpdateCurrentUserProfileRequest,
+    UpdateUserProfileRequest,
     UserSchema,
 )
 
@@ -40,6 +43,23 @@ async def update_current_user_profile(
     )
 
 
+@router.put("/me/profile/{user_id}", status_code=HTTPStatus.NO_CONTENT)
+async def update_user_profile(
+    user_id: UserId,
+    request: UpdateUserProfileRequest,
+    interactor: FromDishka[UpdateUserProfileInteractor],
+) -> None:
+    await interactor.execute(
+        user_id,
+        UpdateUserProfileRequestDTO(
+            username=request.username,
+            first_name=request.first_name,
+            last_name=request.last_name,
+            bio=request.bio,
+        ),
+    )
+
+
 @router.get("/me/profile")
 async def get_current_user_profile(
     interactor: FromDishka[GetCurrentUserInteractor],