Function delete_usergroup_by_id

apps/api/src/services/users/usergroups.py:388–433

(
    request: Request,
    db_session: AsyncSession,
    current_user: PublicUser | AnonymousUser,
    usergroup_id: int,
)

async def delete_usergroup_by_id(
    request: Request,
    db_session: AsyncSession,
    current_user: PublicUser | AnonymousUser,
    usergroup_id: int,
) -> str:

    statement = select(UserGroup).where(UserGroup.id == usergroup_id)
    usergroup = (await db_session.execute(statement)).scalars().first()

    if not usergroup:
        raise HTTPException(
            status_code=404,
            detail="UserGroup not found",
        )

    # RBAC check — scoped to the usergroup's org to prevent cross-org IDOR
    await rbac_check(
        request,
        usergroup_uuid=usergroup.usergroup_uuid,
        current_user=current_user,
        action="delete",
        db_session=db_session,
        org_id=usergroup.org_id,
    )

    # Feature usage
    await increase_feature_usage("usergroups", usergroup.org_id, db_session)

    usergroup_uuid_val = usergroup.usergroup_uuid
    usergroup_name_val = usergroup.name
    usergroup_org_id = usergroup.org_id

    await db_session.delete(usergroup)
    await db_session.commit()

    await dispatch_webhooks(
        event_name="usergroup_deleted",
        org_id=usergroup_org_id,
        data={
            "usergroup_uuid": usergroup_uuid_val,
            "name": usergroup_name_val,
        },
    )

    return "UserGroup deleted successfully"


async def add_users_to_usergroup(