Page MenuHomeWrite.as
Create Task
Maniphest T319

Support account deletion
Closed, ResolvedPublic
Actions

Description

Overview

Users should be able to completely delete their account, like any sane service.

Progress

  • API
  • Web

Backend

Add a deleteUser func that takes a User and bool on whether or not to delete all the user's posts. Should remove all user traces from:

  • unsetpasswords
  • accesstokens
  • oauth
  • users
  • usererrors

Removes collection traces:

  • collections
  • collectionemails

Removes posts if user wanted it:

  • posts

Deletes external accounts when they're entirely based on logging in with Write.as, e.g. Snap.as currently.

  • apps

Revisions and Commits

Restricted Diffusion Commit
Restricted Diffusion Commit
Restricted Diffusion Commit
Restricted Diffusion Commit
rWF WriteFreely
rWFd3d77cee54e6 Make open account deletion configurable
rWF7c1c1218b1fc Tweak "deletion success" message and note it doesn't work
rWFb092421f6ebc Add Cross-Site Request Forgery (CSRF) protection on account deletion
rWF1d8facfe1cc6 Prevent admin self-deletion in API
rWFa6c93c37dabf Move user account deletion to confirmation modal
rWFf06ab629d172 Make user deletion success message more concise
rWFe4164cbf6713 Move admin user deletion confirmation to modal
rWFf8a40fac4b08 Merge pull request #202 from writeas/T319-delete-account
rWFaf14bcbb7804 Clean up oauth_users table on account deletion
rWFc9faff178d95 Don't float posts on account deletion

Related Objects
Search...

Event Timeline

matt created this task.Jun 11 2016, 9:33 AM
matt moved this task from Backlog to Next Up on the API board.Jul 6 2016, 11:54 PM
matt moved this task from Backlog to Next Up on the Write.as Web board.Sep 14 2016, 2:17 AM
matt moved this task from Next Up to Far Future on the API board.Oct 5 2016, 3:17 AM
matt moved this task from Next Up to Near Future on the Write.as Web board.Oct 16 2016, 5:44 PM
matt raised the priority of this task from Normal to High.Feb 4 2018, 9:38 PM
matt added a project: Restricted Project.

More users have requested this lately. This is especially important for those who want to limit their digital footprint, a major thing for privacy-conscious users.

matt updated the task description. (Show Details)Feb 4 2018, 9:39 PM
matt raised the priority of this task from High to Unbreak Now!.May 2 2018, 11:46 PM

Even more important now due to the GDPR.

matt lowered the priority of this task from Unbreak Now! to Normal.Oct 31 2018, 10:34 PM

Or... not so important. We should also send a Delete activity for federated blogs.

matt changed the visibility from "Restricted Project (Project)" to "All Users".Jun 2 2019, 11:25 PM
matt changed the edit policy from "Restricted Project (Project)" to "All Users".
matt added a project: WriteFreely.
matt moved this task from Backlog to Soon / v1.0 on the WriteFreely board.Jul 21 2019, 3:02 AM
matt changed the visibility from "All Users" to "Public (No Login Required)".Oct 30 2019, 2:27 PM
matt added a comment.Oct 30 2019, 3:55 PM

Note: implementation details are out of date and only apply to Write.as. For implementation in WriteFreely, refer to [deleteAccount()](https://phabricator.write.as/diffusion/W/browse/master/database.go$2674) func in rW.

matt removed matt as the assignee of this task.Oct 30 2019, 3:55 PM
robjloranger claimed this task.Oct 30 2019, 6:22 PM
robjloranger added a comment.Oct 31 2019, 3:23 PM

Looks like this function also already exists in writefreely under *datastore, but is still out of date and needs modification.

robjloranger added a comment.EditedOct 31 2019, 4:03 PM

status update

list of writefreely tables modifed so far:

  • collectionattributes
  • collectionkeys
  • collectionpasswords
  • collectionredirects
  • remotefollows
  • collections
  • posts
  • accesstokens
  • userattributes
  • users
  • userinvites as an admin might delete a user and not want their friends signing up
robjloranger added a comment.EditedOct 31 2019, 10:25 PM

PR for writefreely is up including CLI flags, next is to add things like federated deletes for all collections including default (i.e. username) and and posts if they are being deleted as well.

matt mentioned this in rWF9d360f0e4122: Merge branch 'develop' into T319-delete-account.Feb 8 2020, 7:47 PM
matt added a commit: rWFc9faff178d95: Don't float posts on account deletion.
matt added a commit: rWFaf14bcbb7804: Clean up oauth_users table on account deletion.
GitHub <noreply@github.com> added a commit: rWFf8a40fac4b08: Merge pull request #202 from writeas/T319-delete-account.Feb 8 2020, 8:01 PM
matt mentioned this in rWFd6c0026644e8: Merge branch 'develop' into T319-admin-delete-acct.Feb 9 2020, 4:51 PM
matt mentioned this in rWFf406f894c5f2: Merge branch 'develop' into T319-user-delete-acct.
matt added a project: Restricted Project.Feb 2 2021, 3:10 AM
matt moved this task from Restricted Project Column to Restricted Project Column on the Restricted Project board.
matt moved this task from Restricted Project Column to Restricted Project Column on the Restricted Project board.Mar 3 2021, 7:20 PM
matt mentioned this in rWF3b58d77e6783: Merge branch 'develop' into T319-admin-delete-acct.Apr 22 2021, 1:09 PM
matt claimed this task.Apr 22 2021, 2:06 PM
matt raised the priority of this task from Normal to High.
matt added a subscriber: robjloranger.

Will finish this up and get it merged. Because of how widely this feature is needed, I think we can get it in without the fediverse deletion functionality for now.

matt added a commit: rWFe4164cbf6713: Move admin user deletion confirmation to modal.Apr 22 2021, 2:08 PM
matt added a commit: rWFf06ab629d172: Make user deletion success message more concise.Apr 22 2021, 2:11 PM
matt mentioned this in rWFf689706baae1: Merge branch 'T319-admin-delete-acct' into T319-user-delete-acct.Apr 22 2021, 2:15 PM
matt added a commit: rWF1d8facfe1cc6: Prevent admin self-deletion in API.Apr 22 2021, 4:46 PM
matt added a commit: rWFa6c93c37dabf: Move user account deletion to confirmation modal.
matt added a commit: rWFb092421f6ebc: Add Cross-Site Request Forgery (CSRF) protection on account deletion.
matt added a commit: rWF7c1c1218b1fc: Tweak "deletion success" message and note it doesn't work.
matt added a commit: rWFd3d77cee54e6: Make open account deletion configurable.Apr 22 2021, 5:13 PM
matt added a commit: Restricted Diffusion Commit.Apr 23 2021, 8:12 PM
matt added a commit: Restricted Diffusion Commit.Apr 23 2021, 8:47 PM
matt added a commit: Restricted Diffusion Commit.
matt added a commit: Restricted Diffusion Commit.
GitHub <noreply@github.com> mentioned this in rWF4e0912b32a8a: Merge pull request #203 from writefreely/T319-admin-delete-acct.Apr 28 2021, 1:47 PM
GitHub <noreply@github.com> mentioned this in rWFaffcd270bb3b: Merge pull request #204 from writefreely/T319-user-delete-acct.Apr 28 2021, 9:57 PM
matt closed this task as Resolved.Apr 29 2021, 6:06 PM

This is live on Write.as and merged into WriteFreely for the v0.13 release.

matt added a parent task: T854: Snap.as account deletion with Write.as.May 14 2021, 8:00 PM
matt added a parent task: T855: Support Team member account deletion.May 14 2021, 8:06 PM
write.as · guide · api