Implement user group management with toggle functionality for superusers

generic/views.py

@@ -49,6 +49,7 @@ from reversion.views import RevisionMixin
 from atlas.models import CaseCollection, CaseDetail
 from generic.decorators import user_is_cid_user_manager
 from generic.filters import CidUserFilter, ExaminationFilter, SupervisorFilter
+from generic.models import UserUserGroup
 
 from generic.tables import (
     CidUserExamTable,
@@ -3876,6 +3877,39 @@ def user_group_view_all(request):
     )
 
 
+@login_required
+def user_toggle_group(request, user_id, group_id):
+    """Toggle membership of a user in a UserUserGroup.
+
+    This endpoint is superuser-only. It toggles membership and returns the
+    rendered groups fragment for the user so the frontend can swap it in.
+    """
+    if request.method != "POST":
+        return HttpResponse("Method not allowed", status=405)
+
+    if not request.user.is_superuser:
+        return HttpResponse("Forbidden", status=403)
+
+    user = get_object_or_404(User, pk=user_id)
+    group = get_object_or_404(UserUserGroup, pk=group_id)
+
+    # Toggle membership
+    if group.users.filter(pk=user.pk).exists():
+        group.users.remove(user)
+    else:
+        group.users.add(user)
+
+    # Return the updated groups fragment (outerHTML replacement)
+    available_groups = UserUserGroup.objects.filter(archive=False).exclude(
+        pk__in=user.user_groups.values_list("pk", flat=True)
+    )
+    return render(
+        request,
+        "generic/partials/user_groups_fragment.html",
+        {"user": user, "available_groups": available_groups},
+    )
+
+
 @login_required
 @user_is_cid_user_manager
 def group_email_resend(request, pk):