Account Deletion

[SidharthBansal]

Please describe the problem (or idea)

Currently user does not have an option to delete his/her account. So, there is a need to create a function to delete user and all associated data.
As discussed in #2771

[grvsachdeva]

Hi @SidharthBansal , can I take this one ?

[SidharthBansal]

@gaurav this will be great. But first we need to think what will happen to his comments and research articles. People may have tagged him.

[grvsachdeva]

Lets ask @jywarren about this.

[jywarren]

I think we have to leave comments and notes -- they've been open sourced. Perhaps we can show "this author has been deleted"? I need to look up in the GDPR right-to-deletion for what happens to the credit line from a Creative Commons licensed text?

…

On Wed, Jun 13, 2018 at 9:38 PM Sidharth Bansal ***@***.***> wrote: @gaurav <https://github.com/gaurav> this will be great. But first we need to think what will happen to his comments and research articles. People may have tagged him. — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#2819 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AABfJ7hjAzvXbeBq0VLxyhg7f6djTmUAks5t8cyZgaJpZM4Ui1Je> .

[SidharthBansal]

I think first of all we should divide the associations of users into two categories. One category will comprise of associations which can be deleted with user like usertags. And the second category which can't be deleted. Then we should focus on second category. Like for wiki pages, we can either delete the page or we can leave it as it is. The wiki page have no comments nor likes. Then comes notes, they have comments and like option so we should not delete the notes at all as they contain comments. Wiki's can be deleted. We need to separate the two stuff which we can take risk to be deleted and the other which we cannot.
I was thinking that we could make text instead of tags for users which are deleted. One corner case here comes is when someone deletes his/her account and a new user tries to sign up with the deleted user name. This will lead to wrong contributions and tagging of new user. Hence, there is also a need to store usernames.

[jywarren]

this is a cool approach, thanks! Maybe we could have a `is_deletable?` method for nodes, comments, answers? With some common or centralized logic?

…

On Thu, Jun 14, 2018 at 10:34 AM Sidharth Bansal ***@***.***> wrote: I think first of all we should divide the associations of users into two categories. One category will comprise of associations which can be deleted with user like usertags. And the second category which can't be deleted. Then we should focus on second category. Like for wiki pages, we can either delete the page or we can leave it as it is. The wiki page have no comments nor likes. Then comes notes, they have comments and like option so we should not delete the notes at all as they contain comments. Wiki's can be deleted. We need to separate the two stuff which we can take risk to be deleted and the other which we cannot. I was thinking that we could make text instead of tags for users which are deleted. One corner case here comes is when someone deletes his/her account and a new user tries to sign up with the deleted user name. This will lead to wrong contributions and tagging of new user. Hence, there is also a need to store usernames. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#2819 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AABfJ9Aa_R-fytctgUnUl1Q3ur3Mo_Gdks5t8oJ8gaJpZM4Ui1Je> .

[SidharthBansal]

'Is_deletable' option from the client side or server side?
I guess you are trying to give client an option under each comment, is this deletable. Am I right?

[jywarren]

Oh, no i guess i meant on the server side? I haven't found anything on the GDPR about whether creative commons licensed content would have to be scrubbed if someone wants to delete their account. I guess this is a big unknown. My guess is no, but I don't know for sure. If we don't keep peoples' usernames, how will we know the provenance of a piece of content?

…

On Thu, Jun 14, 2018 at 11:06 AM Sidharth Bansal ***@***.***> wrote: 'Is_deletable' option from the client side or server side? I guess you are trying to give client an option under each comment, is this deletable. Am I right? — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#2819 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AABfJ-VfR-bHSgBGb2vGXc6PS_pmKerhks5t8onlgaJpZM4Ui1Je> .

[sagarpreet-chadha]

Hi , if we take example of Facebook ...so they have 2 things :
1.) Deactivate 2.) Delete .

When someone deactivates the account , every piece of their data is retained , but no one can access that user's profile or tag that person anymore . The user can login anytime in the future .

When someone deletes the account permanently , all data associated is deleted . This process is irreversible .