Add tenant member management UI

[Tianhao-Gu]

Summary

• Full-stack tenant member management: stewards can view, add, and remove members from a new "Manage Members" tab on tenant nodes in the sidebar tree
• "Manage Members" only visible to stewards/admins — uses a new visible predicate on IMenuItem, gated by is_steward flag from the /tenants endpoint
• Backend adds REST endpoints for tenant members (CRUD), user names listing, and tenant summaries, with real berdl_notebook_utils integration and automatic mock fallback
• Frontend AddMemberForm uses a <datalist>-based searchable dropdown populated from the user names API, filtering out existing members
• managementApi.ts reuses shared serverGet/serverPost/serverDelete from api.ts — no duplicated HTTP boilerplate
• Path parameter validation rejects encoded slashes and traversal sequences
• Accessibility: aria-label on remove button and username input
• Mock mode: add/remove mutate in-memory store so refetch reflects changes

New endpoints

Method	Path	Description
GET	/api/tenant-data-browser/users/names	List all usernames (for Add Member dropdown)
GET	/api/tenant-data-browser/tenants	List tenants with steward/member flags
GET	/api/tenant-data-browser/tenants/{name}/members	List members of a tenant
POST	/api/tenant-data-browser/tenants/{name}/members/{user}	Add member with permission
DELETE	/api/tenant-data-browser/tenants/{name}/members/{user}	Remove member

Test plan

• Build extension wheel and install in spark_notebook Docker stack
• Verify "Manage Members" button appears only on steward tenant nodes
• Verify "Manage Members" button hidden for non-steward tenants
• Open Manage Members tab — confirm member list loads with real data
• Add a member via the searchable dropdown — confirm they appear in the list
• Remove a member — confirm removal after confirmation dialog
• Verify mock fallback works when berdl_notebook_utils is not installed
• Verify members tab restores correctly on page reload

[github-actions]

Prerelease: pr-29

Wheel will be attached once the build completes. Updated on each push.

[Copilot]

Pull request overview

Adds end-to-end tenant member management (view/add/remove) to the Tenant Data Browser extension by introducing new server endpoints and a new “Manage Members” tab reachable from tenant nodes in the sidebar tree.

Changes:

• Added Python server REST endpoints for listing users, listing tenants, and tenant member CRUD with BERDL integration + mock fallback.
• Added a new JupyterLab main-area “Members” tab and a “Manage Members” action on tenant nodes.
• Added a small frontend management API client plus shared HTTP helpers for GET/POST/DELETE.

Reviewed changes

Copilot reviewed 10 out of 10 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
tenant_data_browser/mock_definitions.py	Adds mock implementations for user listing and tenant membership operations.
tenant_data_browser/mock_data.py	Introduces mock user list, tenant summaries, and tenant member fixtures.
tenant_data_browser/handlers.py	Adds authenticated REST handlers + routes for usernames, tenants, and tenant members CRUD.
tenant_data_browser/cdm_methods.py	Adds BERDL import wrappers for tenant management and user listing with mock fallback.
src/providers/berdlProvider.tsx	Adds “Manage Members” menu/button on tenant nodes to open the members tab.
src/membersTab.ts	Defines the command ID and target type for opening members tabs.
src/managementApi.ts	Implements client calls for usernames and tenant member CRUD using shared server helpers.
src/index.ts	Registers the members tab command and integrates layout restoration/tracking for the new tab type.
src/api.ts	Exposes serverGet and adds shared serverPost/serverDelete + improved error parsing.
src/TenantMembersTab.tsx	Implements the members management UI (list members, add via datalist, remove with confirmation).

Comments suppressed due to low confidence (1)

tenant_data_browser/mock_definitions.py:220

• remove_tenant_member in mock mode does not actually remove the user from MOCK_TENANT_MEMBERS. Since the UI refetches after deletion, the removed member will reappear under mocks. Consider updating the mock store to delete the matching entry (and possibly raising a 404-like error when the user isn’t present).

def remove_tenant_member(tenant_name, username):
    """
    Mock function that simulates removing a member from a tenant.
    Mimics berdl_notebook_utils.minio_governance.tenant_management.remove_tenant_member().

    Args:
        tenant_name (str): Name of the tenant.
        username (str): Username to remove.
    """
    time.sleep(MOCK_DELAY)

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.