UserSettings: Add new user settings GUI application

Adds a new Users Settings application that provides a graphical
interface for managing system user accounts, with feature parity
with the useradd/userdel/usermod CLI utilities.

Author: bplaat

Base/res/apps/UsersSettings.af

@@ -0,0 +1,7 @@
+[App]
+Name=Users Settings
+Executable=/bin/UsersSettings
+Category=Settings
+Description=Configure users
+ExcludeFromSystemMenu=true
+RequiresRoot=true

Base/res/icons/16x16/app-user-settings.png

@@ -0,0 +1,48 @@
+## Name
+
+![Icon](/res/icons/16x16/app-user-settings.png) Users Settings
+
+[Open](launch:///bin/UsersSettings)
+
+## Synopsis
+
+```**sh
+$ UsersSettings
+```
+
+## Description
+
+`Users Settings` is an application for managing user accounts on the system.
+
+### User List
+
+The left panel lists all user accounts present on the system. Selecting a user displays their details in the right panel.
+
+### Adding a User
+
+Click the **Add** button below the user list to open the _Add User_ dialog. Fill in:
+
+-   **Account Type** — _Standard_ for a regular user or _Administrator_ to also grant membership of the `wheel` group.
+-   **Full Name** — The user's display name (optional).
+-   **Username** — The login name for the new account.
+-   **Password** — The initial password for the account.
+
+New users are automatically added to the `users`, `window`, `audio`, `lookup` and `phys` groups, so they can login to their own desktop environment.
+
+### Editing a User
+
+Select a user from the list to view and edit their details:
+
+-   **Full Name** — The user's display name stored in the GECOS field.
+-   **Shell** — User's login shell.
+-   **Account Type** — _Standard_ or _Administrator_. Changing this adds or removes the user from the `wheel` group.
+
+Click **Apply Changes** to save any modifications.
+
+### Changing a Password
+
+Click the **Change Password...** button in the user details panel to open the _Change Password_ dialog. Enter and confirm the new password, then click **OK**.
+
+### Deleting a User
+
+Select a user from the list and click the **Delete** button. A confirmation dialog will appear before the account and its home directory are permanently removed.

Base/res/icons/32x32/app-user-settings.png

@@ -45,6 +45,7 @@ add_subdirectory(Terminal)
 add_subdirectory(TerminalSettings)
 add_subdirectory(TextEditor)
 add_subdirectory(ThemeEditor)
+add_subdirectory(UsersSettings)
 add_subdirectory(VideoPlayer)
 add_subdirectory(Weather)
 add_subdirectory(Welcome)

Base/usr/share/man/man1/Applications/UsersSettings.md

@@ -0,0 +1,24 @@
+serenity_component(
+    UsersSettings
+    RECOMMENDED
+    TARGETS UsersSettings
+)
+
+compile_gml(UsersTab.gml UsersTabGML.cpp)
+compile_gml(UserAddDialog.gml UserAddDialogGML.cpp)
+compile_gml(UserDetailsWidget.gml UserDetailsWidgetGML.cpp)
+compile_gml(ChangePasswordDialog.gml ChangePasswordDialogGML.cpp)
+
+set(SOURCES
+    main.cpp
+    UsersTab.cpp
+    UsersTabGML.cpp
+    UserAddDialog.cpp
+    UserAddDialogGML.cpp
+    UserDetailsWidget.cpp
+    UserDetailsWidgetGML.cpp
+    ChangePasswordDialogGML.cpp
+)
+
+serenity_app(UsersSettings ICON app-user-settings)
+target_link_libraries(UsersSettings PRIVATE LibCore LibGfx LibGUI LibMain)

Userland/Applications/CMakeLists.txt

@@ -0,0 +1,57 @@
+@UsersSettings::ChangePasswordDialog {
+    fixed_width: 280
+    fixed_height: 85
+    fill_with_background_color: true
+    layout: @GUI::VerticalBoxLayout {
+        margins: [4]
+    }
+
+    @GUI::Widget {
+        fixed_height: 24
+        layout: @GUI::HorizontalBoxLayout {}
+
+        @GUI::Label {
+            text: "New Password:"
+            text_alignment: "CenterLeft"
+            fixed_width: 120
+        }
+
+        @GUI::PasswordBox {
+            name: "new_password_textbox"
+        }
+    }
+
+    @GUI::Widget {
+        fixed_height: 24
+        layout: @GUI::HorizontalBoxLayout {}
+
+        @GUI::Label {
+            text: "Confirm Password:"
+            text_alignment: "CenterLeft"
+            fixed_width: 120
+        }
+
+        @GUI::PasswordBox {
+            name: "confirm_password_textbox"
+        }
+    }
+
+    @GUI::Widget {
+        fixed_height: 24
+        layout: @GUI::HorizontalBoxLayout {}
+
+        @GUI::Layout::Spacer {}
+
+        @GUI::DialogButton {
+            name: "ok_button"
+            text: "OK"
+            fixed_width: 75
+        }
+
+        @GUI::DialogButton {
+            name: "cancel_button"
+            text: "Cancel"
+            fixed_width: 75
+        }
+    }
+}

Userland/Applications/UsersSettings/CMakeLists.txt

@@ -0,0 +1,22 @@
+/*
+ * Copyright (c) 2026, Bastiaan van der Plaat <bastiaan.v.d.plaat@gmail.com>
+ *
+ * SPDX-License-Identifier: BSD-2-Clause
+ */
+
+#pragma once
+
+#include <LibGUI/Widget.h>
+
+namespace UsersSettings {
+
+class ChangePasswordDialog final : public GUI::Widget {
+    C_OBJECT(ChangePasswordDialog)
+public:
+    static ErrorOr<NonnullRefPtr<ChangePasswordDialog>> try_create();
+
+private:
+    ChangePasswordDialog() = default;
+};
+
+}

Userland/Applications/UsersSettings/ChangePasswordDialog.gml

@@ -0,0 +1,19 @@
+/*
+ * Copyright (c) 2026, Bastiaan van der Plaat <bastiaan.v.d.plaat@gmail.com>
+ *
+ * SPDX-License-Identifier: BSD-2-Clause
+ */
+
+#pragma once
+
+#include <AK/Array.h>
+#include <AK/StringView.h>
+
+namespace UsersSettings {
+
+static constexpr u32 MIN_NORMAL_UID = 100;
+static constexpr Array ACCOUNT_TYPE_NAMES = { "Standard"sv, "Administrator"sv };
+static constexpr StringView WHEEL_GROUP_NAME = "wheel"sv;
+static constexpr Array DEFAULT_USER_GROUPS = { "users"sv, "window"sv, "audio"sv, "lookup"sv, "phys"sv };
+
+}

Userland/Applications/UsersSettings/ChangePasswordDialog.h

@@ -0,0 +1,104 @@
+/*
+ * Copyright (c) 2026, Bastiaan van der Plaat <bastiaan.v.d.plaat@gmail.com>
+ *
+ * SPDX-License-Identifier: BSD-2-Clause
+ */
+
+#include "UserAddDialog.h"
+#include "Constants.h"
+#include <LibCore/Account.h>
+#include <LibCore/Command.h>
+#include <LibCore/SecretString.h>
+#include <LibCore/System.h>
+#include <LibGUI/Button.h>
+#include <LibGUI/Dialog.h>
+#include <LibGUI/ItemListModel.h>
+#include <LibGUI/MessageBox.h>
+
+namespace UsersSettings {
+
+ErrorOr<void> UserAddDialog::initialize()
+{
+    m_account_type_combobox = find_descendant_of_type_named<GUI::ComboBox>("account_type_combobox");
+    m_full_name_textbox = find_descendant_of_type_named<GUI::TextBox>("full_name_textbox");
+    m_username_textbox = find_descendant_of_type_named<GUI::TextBox>("username_textbox");
+    m_password_textbox = find_descendant_of_type_named<GUI::PasswordBox>("password_textbox");
+
+    m_account_type_combobox->set_model(*GUI::ItemListModel<StringView, Array<StringView, 2>>::create(ACCOUNT_TYPE_NAMES));
+    m_account_type_combobox->set_only_allow_values_from_model(true);
+    m_account_type_combobox->set_selected_index(0);
+    return {};
+}
+
+ErrorOr<Optional<String>> UserAddDialog::show(GUI::Window* parent_window)
+{
+    auto dialog = TRY(GUI::Dialog::try_create(parent_window));
+    dialog->set_title("Add User");
+    dialog->resize(260, 136);
+    dialog->set_resizable(false);
+
+    auto widget = TRY(UserAddDialog::try_create());
+    dialog->set_main_widget(widget);
+
+    Optional<String> created_username;
+
+    auto& ok_button = *widget->find_descendant_of_type_named<GUI::Button>("ok_button");
+    ok_button.on_click = [&](auto) {
+        auto username = MUST(String::from_byte_string(widget->m_username_textbox->text()));
+        if (username.is_empty()) {
+            GUI::MessageBox::show(dialog, "Username must not be empty."sv, "Error"sv, GUI::MessageBox::Type::Error);
+            return;
+        }
+
+        if (auto result = widget->add_user(); result.is_error()) {
+            GUI::MessageBox::show_error(dialog, MUST(String::formatted("Failed to add user: {}", result.error())));
+            return;
+        }
+
+        created_username = username;
+        dialog->done(GUI::Dialog::ExecResult::OK);
+    };
+    ok_button.set_default(true);
+
+    auto& cancel_button = *widget->find_descendant_of_type_named<GUI::Button>("cancel_button");
+    cancel_button.on_click = [dialog](auto) {
+        dialog->done(GUI::Dialog::ExecResult::Cancel);
+    };
+
+    dialog->exec();
+    return created_username;
+}
+
+ErrorOr<void> UserAddDialog::add_user()
+{
+    auto full_name = TRY(String::from_byte_string(m_full_name_textbox->text()));
+    auto username = TRY(String::from_byte_string(m_username_textbox->text()));
+    auto password = Core::SecretString::take_ownership(m_password_textbox->text().to_byte_buffer());
+    bool is_admin = m_account_type_combobox->selected_index() == 1;
+
+    // Create user via useradd.
+    if (!full_name.is_empty()) {
+        TRY(Core::command("useradd"sv, { "--create-home"sv, "--gecos"sv, full_name.bytes_as_string_view(), username.bytes_as_string_view() }, {}));
+    } else {
+        TRY(Core::command("useradd"sv, { "--create-home"sv, username.bytes_as_string_view() }, {}));
+    }
+
+    // Update groups and password via Core::Account.
+    auto account = TRY(Core::Account::from_name(username));
+    for (auto group_name : DEFAULT_USER_GROUPS) {
+        auto maybe_group = Core::System::getgrnam(group_name);
+        if (!maybe_group.is_error() && maybe_group.value().has_value())
+            account.add_extra_gid(maybe_group.value()->gr_gid);
+    }
+    if (is_admin) {
+        auto maybe_wheel = Core::System::getgrnam(WHEEL_GROUP_NAME);
+        if (!maybe_wheel.is_error() && maybe_wheel.value().has_value())
+            account.add_extra_gid(maybe_wheel.value()->gr_gid);
+    }
+    TRY(account.set_password(password));
+    TRY(account.sync());
+
+    return {};
+}
+
+}