[DOP-19931] Add manage_superusers script

Author: Ilyas Gasanov

docker-compose.yml

@@ -38,7 +38,7 @@ services:
       - 8000:8000
     environment:
       # list here usernames which should be assigned SUPERUSER role on application start
-      SYNCMASTER__ENTRYPOINT__SUPERUSERS: syncmaster
+      SYNCMASTER__ENTRYPOINT__SUPERUSERS: admin
       # PROMETHEUS_MULTIPROC_DIR is required for multiple workers, see:
       # https://prometheus.github.io/client_python/multiprocess/
       PROMETHEUS_MULTIPROC_DIR: /tmp/prometheus-metrics

docker/entrypoint_backend.sh

@@ -3,7 +3,6 @@ set -e
 
 python -m syncmaster.db.migrations upgrade head
 
-# use only by entrypoint
 if [[ "x${SYNCMASTER__ENTRYPOINT__SUPERUSERS}" != "x" ]]; then
   superusers=$(echo "${SYNCMASTER__ENTRYPOINT__SUPERUSERS}" | tr "," " ")
   python -m syncmaster.backend.scripts.manage_superusers add ${superusers}

docs/backend/install.rst

@@ -28,8 +28,29 @@ Options can be set via ``.env`` file or ``environment`` section in ``docker-comp
 
 After container is started and ready, open http://localhost:8000/docs.
 
+Managing superusers
+^^^^^^^^^^^^^^^^^^^
+
 Users listed in ``SYNCMASTER__ENTRYPOINT__SUPERUSERS`` env variable will be automatically promoted to ``SUPERUSER`` role.
 
+Adding superusers:
+
+.. code-block:: console
+
+    $ python -m syncmaster.backend.scripts.manage_superusers add <username1> <username2>
+
+Removing superusers:
+
+.. code-block:: console
+
+    $ python -m syncmaster.backend.scripts.manage_superusers remove <username1> <username2>
+
+Viewing list of superusers:
+
+.. code-block:: console
+
+    $ python -m syncmaster.backend.scripts.manage_superusers list
+
 Without docker
 --------------
 

tests/test_database/test_manage_superusers.py

@@ -50,12 +50,12 @@ async def test_add_superusers(caplog, session: AsyncSession, simple_users: list[
 
 @pytest.mark.parametrize("simple_users", [10], indirect=True)
 async def test_remove_superusers(caplog, session: AsyncSession, simple_users: list[MockUser]):
-    # users 0 and 1 will be superusers, 2-10 will not
+    # users 0-4 will be superusers, 5-10 will not
     to_create = [user.username for user in simple_users[:5]]
-    to_delete = [user.username for user in simple_users[2:]]
+    to_delete = [user.username for user in simple_users[5:]]
 
-    expected_superusers = [user.username for user in simple_users[:2]]
-    expected_not_superusers = [user.username for user in simple_users[2:]]
+    expected_superusers = [user.username for user in simple_users[:5]]
+    expected_not_superusers = [user.username for user in simple_users[5:]]
 
     await add_superusers(session, to_create)