Add account deletion confirmation page, privacy settings template, and profile view template

- Created a new HTML template for account deletion confirmation with user-friendly messaging and a return link.
- Developed a privacy settings page allowing users to control visibility of their personal information with appropriate messaging for success and error states.
- Implemented a profile view template displaying user information, statistics, teams, and achievements based on user permissions.
- Added responsive design elements and improved user interface with Tailwind CSS classes for better aesthetics and usability.

app/utils/auth.py

@@ -3,7 +3,7 @@ Authentication utilities for LeagueLedger.
 This module provides backward compatibility with the existing code while leveraging
 the new Starlette authentication system.
 """
-from typing import Optional
+from typing import Optional, Dict, Any
 from fastapi import Request, Depends
 from sqlalchemy.orm import Session
 from ..db import get_db
@@ -157,5 +157,106 @@ async def requires_admin(request: Request, db: Session = Depends(get_db)) -> Use
         
     return user
 
+def check_privacy_permission(
+    db: Session, 
+    profile_user: User, 
+    viewing_user_id: Optional[int], 
+    setting_name: str
+) -> bool:
+    """
+    Check if the viewing user has permission to see a specific profile setting
+    
+    Args:
+        db: Database session
+        profile_user: The user whose profile is being viewed
+        viewing_user_id: The ID of the user viewing the profile (None if not logged in)
+        setting_name: The name of the setting to check (email, full_name, teams, points, achievements, events)
+    
+    Returns:
+        True if viewer has permission to see the setting, False otherwise
+    """
+    # Admin users can see everything
+    if viewing_user_id:
+        viewing_user = db.query(User).filter(User.id == viewing_user_id).first()
+        if viewing_user and viewing_user.is_admin:
+            return True
+    
+    # Owner can see everything on their own profile
+    if viewing_user_id and viewing_user_id == profile_user.id:
+        return True
+    
+    # Get privacy settings for this user
+    privacy_settings = profile_user.get_privacy_settings()
+    privacy_level = privacy_settings.get(setting_name, "private")
+    
+    # Public settings are visible to everyone
+    if privacy_level == "public":
+        return True
+    
+    # Private settings are only visible to the user and admins (handled above)
+    if privacy_level == "private":
+        return False
+    
+    # For "friends" level (team members), check if viewing user is in same team
+    if privacy_level == "friends" and viewing_user_id:
+        # Get teams of the profile user
+        profile_user_team_ids = [
+            membership.team_id 
+            for membership in db.query(TeamMembership).filter(
+                TeamMembership.user_id == profile_user.id
+            ).all()
+        ]
+        
+        # Check if viewing user is in any of the same teams
+        common_team = db.query(TeamMembership).filter(
+            TeamMembership.user_id == viewing_user_id,
+            TeamMembership.team_id.in_(profile_user_team_ids)
+        ).first()
+        
+        return common_team is not None
+    
+    return False
+
+def get_viewable_profile_data(
+    db: Session, 
+    profile_user: User, 
+    viewing_user_id: Optional[int]
+) -> Dict[str, Any]:
+    """
+    Get profile data respecting privacy settings
+    
+    Args:
+        db: Database session
+        profile_user: The user whose profile is being viewed
+        viewing_user_id: The ID of the user viewing the profile (None if not logged in)
+    
+    Returns:
+        Dictionary with profile data that the viewing user is allowed to see
+    """
+    data = {
+        "username": profile_user.username,
+        "picture": profile_user.picture,
+        "is_admin": profile_user.is_admin,
+        "created_at": profile_user.created_at
+    }
+    
+    # Only include email if permission allows
+    if check_privacy_permission(db, profile_user, viewing_user_id, "email"):
+        data["email"] = profile_user.email
+    
+    # Only include full name if permission allows
+    if check_privacy_permission(db, profile_user, viewing_user_id, "full_name"):
+        data["first_name"] = profile_user.first_name
+        data["last_name"] = profile_user.last_name
+    
+    # For teams, points, achievements, events - we'll just include permission flags
+    # The actual data will be loaded by the view functions when needed
+    data["can_view_teams"] = check_privacy_permission(db, profile_user, viewing_user_id, "teams")
+    data["can_view_points"] = check_privacy_permission(db, profile_user, viewing_user_id, "points")
+    data["can_view_achievements"] = check_privacy_permission(db, profile_user, viewing_user_id, "achievements")
+    data["can_view_events"] = check_privacy_permission(db, profile_user, viewing_user_id, "events")
+    
+    return data
+
 # Note: For new code, consider using the decorators in app.auth.permissions instead
 # of these dependency functions directly