mahara-contributors team mailing list archive

[Lilian HUGUES <lilian.hugues@xxxxxxxxx>]

Many thanks for this new whishlist.

1- agree with you
2- IMHO, I think We need to keep the topic started with the first message tagged as 'Post Deleted'. If we delete the whole topic, it will delete messages of other user in the topic.
3- Here I'm not agree at all. I think that everything in a group is not done by a user but by a the "corporation" group. As soon as the file is uploaded in the group, it is no longer the user'fiel but the group's file.
4- In the same way of thinking a page created in a group is created by the group and not by the user.
5- Agree for stuff owned by user (journal, artefact...) included in a block page of a group
6- fully agree
7- I think here the task has to be not deleted but a kind of "unassigned" statu.

In addition we need to delete : all artefacts owned by the user, all
views owned by the user (and then all access of this view), all
individual plans...

One difficult question is : what do we have to do for a group which the
deleted user is admin ? I'd said if their is another admin on this
group, there is no matter but if the user is the only one admin, do we
assign the older subscribed user or do we delete the group and its
content ?

Actually at the first view the way the deletion is working today seems
to be ok regarding GDPR compliance but if we look closer, we can see the
often user add signature at the end of their messages in forum... And
even we indicated that the message is sent by deleted user, we can
recognize the user by reading the signature.

Due to this GDPR rules, I've started to list all tables linked to the
"user" table in the database. I'll get back to you as soon as I'll
finish this job in order to continue discuss on this touchy topic.

Regards

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1878690

Title:
  Fully erase a user from Mahara

Status in Mahara:
  New

Bug description:
  When you delete a user account, all personal data is wiped from the
  system. The user’s contributions in groups, e.g. forum messages,
  uploaded files and pages created in a group, are still available, but
  are made anonymous by changing the name to « Deleted user » as author
  where an author is shown.

  In accordance with GDPR compliance, it would be good to offer the
  possibility to not only anonymize contribution but delete them when
  the user is deleted.

  Currently this option is not available.

  To implement this we would need to make the following changes:

  1) Turn forum posts done by the user into 'Post deleted' value to
  allow post threads to continue to exist

  2) Delete forum topics the user started

  3) Delete any files uploaded into groups by the user

  4) Delete any pages in groups created by the user

  5) Delete / update blocks on other group pages where content / files
  added user exist

  6) Delete any group journal entries done by the user

  7) Delete any group plans / tasks that were created by the user

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1878690/+subscriptions