portainer/app/services/api/userService.js

angular.module('portainer.services')
.factory('UserService', ['$q', 'Users', 'UserHelper', 'TeamService', 'TeamMembershipService', function UserServiceFactory($q, Users, UserHelper, TeamService, TeamMembershipService) {
  'use strict';
  var service = {};

  service.users = function(includeAdministrators) {
    var deferred = $q.defer();

    Users.query({}).$promise
    .then(function success(data) {
      var users = data.map(function (user) {
        return new UserViewModel(user);
      });
      if (!includeAdministrators) {
        users = UserHelper.filterNonAdministratorUsers(users);
      }
      deferred.resolve(users);
    })
    .catch(function error(err) {
      deferred.reject({ msg: 'Unable to retrieve users', err: err });
    });

    return deferred.promise;
  };

  service.user = function(id) {
    var deferred = $q.defer();

    Users.get({id: id}).$promise
    .then(function success(data) {
      var user = new UserViewModel(data);
      deferred.resolve(user);
    })
    .catch(function error(err) {
      deferred.reject({ msg: 'Unable to retrieve user details', err: err });
    });

    return deferred.promise;
  };

  service.createUser = function(username, password, role, teamIds) {
    var deferred = $q.defer();

    Users.create({}, {username: username, password: password, role: role}).$promise
    .then(function success(data) {
      var userId = data.Id;
      var teamMembershipQueries = [];
      angular.forEach(teamIds, function(teamId) {
        teamMembershipQueries.push(TeamMembershipService.createMembership(userId, teamId, 2));
      });
      $q.all(teamMembershipQueries)
      .then(function success() {
        deferred.resolve();
      });
    })
    .catch(function error(err) {
      deferred.reject({ msg: 'Unable to create user', err: err });
    });

    return deferred.promise;
  };

  service.deleteUser = function(id) {
    return Users.remove({id: id}).$promise;
  };

  service.updateUser = function(id, password, role) {
    var query = {
      password: password,
      role: role
    };
    return Users.update({id: id}, query).$promise;
  };

  service.updateUserPassword = function(id, currentPassword, newPassword) {
    var deferred = $q.defer();

    Users.checkPassword({id: id}, {password: currentPassword}).$promise
    .then(function success(data) {
      if (!data.valid) {
        deferred.reject({invalidPassword: true});
      } else {
        return service.updateUser(id, newPassword, undefined);
      }
    })
    .then(function success(data) {
      deferred.resolve();
    })
    .catch(function error(err) {
      deferred.reject({msg: 'Unable to update user password', err: err});
    });

    return deferred.promise;
  };

  service.userMemberships = function(id) {
    var deferred = $q.defer();

    Users.queryMemberships({id: id}).$promise
    .then(function success(data) {
      var memberships = data.map(function (item) {
        return new TeamMembershipModel(item);
      });
      deferred.resolve(memberships);
    })
    .catch(function error(err) {
      deferred.reject({ msg: 'Unable to retrieve user memberships', err: err });
    });

    return deferred.promise;
  };

  service.userLeadingTeams = function(id) {
    var deferred = $q.defer();

    $q.all({
      teams: TeamService.teams(),
      memberships: service.userMemberships(id)
    })
    .then(function success(data) {
      var memberships = data.memberships;
      var teams = data.teams.filter(function (team) {
        var membership = _.find(memberships, {TeamId: team.Id});
        if (membership && membership.Role === 1) {
          return team;
        }
      });
      deferred.resolve(teams);
    })
    .catch(function error(err) {
      deferred.reject({ msg: 'Unable to retrieve user teams', err: err });
    });

    return deferred.promise;
  };

  return service;
}]);