privacy

Author: pcrespov

packages/postgres-database/src/simcore_postgres_database/models/users.py

@@ -95,6 +95,13 @@
     #
     # User Privacy Rules ------------------
     #
+    sa.Column(
+        "privacy_hide_username",
+        sa.Boolean,
+        nullable=False,
+        server_default=expression.false(),
+        doc="If true, it hides users.name to others",
+    ),
     sa.Column(
         "privacy_hide_fullname",
         sa.Boolean,

packages/postgres-database/src/simcore_postgres_database/utils_users.py

@@ -242,9 +242,16 @@ def is_public(hide_attribute: Column, caller_id: int):
     return hide_attribute.is_(False) | (users.c.id == caller_id)
 
 
-def visible_user_profile_cols(caller_id: int):
+def visible_user_profile_cols(caller_id: int, *, username_label: str):
     """Returns user profile columns with visibility constraints applied based on privacy settings."""
     return (
+        sa.case(
+            (
+                is_private(users.c.privacy_hide_username, caller_id),
+                None,
+            ),
+            else_=users.c.name,
+        ).label(username_label),
         sa.case(
             (
                 is_private(users.c.privacy_hide_email, caller_id),

services/web/server/src/simcore_service_webserver/groups/_groups_repository.py

@@ -440,8 +440,7 @@ async def get_user_from_email(
 def _group_user_cols(caller_id: UserID):
     return (
         users.c.id,
-        users.c.name,
-        *visible_user_profile_cols(caller_id),
+        *visible_user_profile_cols(caller_id, username_label="name"),
         users.c.primary_gid,
     )
 

services/web/server/src/simcore_service_webserver/users/_users_repository.py

@@ -59,8 +59,7 @@ def _public_user_cols(caller_id: int):
     return (
         # Fits PublicUser model
         users.c.id.label("user_id"),
-        users.c.name.label("user_name"),
-        *visible_user_profile_cols(caller_id),
+        *visible_user_profile_cols(caller_id, username_label="user_name"),
         users.c.primary_gid.label("group_id"),
     )
 
@@ -103,7 +102,10 @@ async def search_public_user(
     query = (
         sa.select(*_public_user_cols(caller_id=caller_id))
         .where(
-            users.c.name.ilike(_pattern)
+            (
+                is_public(users.c.privacy_hide_username, caller_id)
+                & users.c.name.ilike(_pattern)
+            )
             | (
                 is_public(users.c.privacy_hide_email, caller_id)
                 & users.c.email.ilike(_pattern)