Many thanks for this new whishlist. 1- agree with you 2- IMHO, I think We need to keep the topic started with the first message tagged as 'Post Deleted'. If we delete the whole topic, it will delete messages of other user in the topic. 3- Here I'm not agree at all. I think that everything in a group is not done by a user but by a the "corporation" group. As soon as the file is uploaded in the group, it is no longer the user'fiel but the group's file. 4- In the same way of thinking a page created in a group is created by the group and not by the user. 5- Agree for stuff owned by user (journal, artefact...) included in a block page of a group 6- fully agree 7- I think here the task has to be not deleted but a kind of "unassigned" statu.
In addition we need to delete : all artefacts owned by the user, all views owned by the user (and then all access of this view), all individual plans... One difficult question is : what do we have to do for a group which the deleted user is admin ? I'd said if their is another admin on this group, there is no matter but if the user is the only one admin, do we assign the older subscribed user or do we delete the group and its content ? Actually at the first view the way the deletion is working today seems to be ok regarding GDPR compliance but if we look closer, we can see the often user add signature at the end of their messages in forum... And even we indicated that the message is sent by deleted user, we can recognize the user by reading the signature. Due to this GDPR rules, I've started to list all tables linked to the "user" table in the database. I'll get back to you as soon as I'll finish this job in order to continue discuss on this touchy topic. Regards -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1878690 Title: Fully erase a user from Mahara Status in Mahara: New Bug description: When you delete a user account, all personal data is wiped from the system. The user’s contributions in groups, e.g. forum messages, uploaded files and pages created in a group, are still available, but are made anonymous by changing the name to « Deleted user » as author where an author is shown. In accordance with GDPR compliance, it would be good to offer the possibility to not only anonymize contribution but delete them when the user is deleted. Currently this option is not available. To implement this we would need to make the following changes: 1) Turn forum posts done by the user into 'Post deleted' value to allow post threads to continue to exist 2) Delete forum topics the user started 3) Delete any files uploaded into groups by the user 4) Delete any pages in groups created by the user 5) Delete / update blocks on other group pages where content / files added user exist 6) Delete any group journal entries done by the user 7) Delete any group plans / tasks that were created by the user To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1878690/+subscriptions _______________________________________________ Mailing list: https://launchpad.net/~mahara-contributors Post to : [email protected] Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
