View Issue Details

IDProjectCategoryView StatusLast Update
0006140Composrcore_cnspublic2025-01-21 01:56
ReporterPatrick SchmalstigAssigned To 
SeverityFeature-request 
Status non-assignedResolutionopen 
Product Version 
Fixed in Version 
Summary0006140: Nix the 'Delete own member account' privilege
DescriptionData protection legislation facilitates that users have the right to be forgotten. This means in many jurisdictions such as the EU, it is required that a site provide a method for members to delete their account.

As such, I feel this privilege is inappropriate. All members should always have the ability to delete their account at any time.

However, to address the issues outlined in the tutorial, as part of this feature request, we should also implement a config option allowing the specification of a "delayed deletion". This means, if set, a member who "deletes" their account does not actually get deleted until the specified number of days elapse. And the member can cancel the process simply by logging in again before the days elapse.
Additional InformationI do have a version 11 non-bundled addon which is not published (but could be) which will blocklist members who delete their account. This can prevent moderation loopholes.

E.g. when an account is deleted, another one cannot be created under the same username, e-mail address, or IP address, if the account had any formal warnings or punitive actions on it. Right now, these are logged in plain-text, but I could take the same approach as data/unsubscribe.php and hash the stored values with the site salt.
TagsRoadmap: Over the horizon
Time estimation (hours)
Sponsorship open

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2025-01-21 01:49 Patrick Schmalstig New Issue
2025-01-21 01:49 Patrick Schmalstig Tag Attached: Roadmap: Over the horizon
2025-01-21 01:53 Patrick Schmalstig Additional Information Updated View Revisions
2025-01-21 01:54 Patrick Schmalstig Additional Information Updated View Revisions
2025-01-21 01:56 Patrick Schmalstig Additional Information Updated View Revisions