feat(db/m7-user-mgmt): migration 0023 + admin-user CRUD queries

Adds users.auto_approve_requests boolean default false (the #355
sub-feature surface; the request-flow handler that honors this
flag is U2.5 follow-up work).

Four new sqlc queries for the U2 admin endpoints:
- CreateUserAdmin: admin-driven user creation, accepts all five
  fields explicitly.
- DeleteUser: hard delete; schema's ON DELETE CASCADE foreign
  keys handle plays/likes/sessions cleanup. Last-admin guard
  lives in the HTTP layer (next task).
- ResetUserPassword: admin sets a new hashed password without
  knowing the old one.
- UpdateUserAutoApprove: toggles the new boolean.

Self-service equivalents (knows-current-password change, etc.)
are U3 work and use distinct queries.

This commit is contained in:

Bryan Van Deusen

2026-05-07 12:12:18 -04:00

parent 97d4dce7ee

commit 6b07eaa44d

5 changed files with 166 additions and 6 deletions

									
										internal/db/dbq/models.go
									
		+1
		
												View File
												
				@@ -491,6 +491,7 @@ type User struct {

					ListenbrainzToken   *string

					ListenbrainzEnabled bool

					DisplayName         *string

					AutoApproveRequests bool

				}

				type UserInvite struct {