haskell / haskell/hackage-server
User group lists still include deleted users (and they can't be removed)
- Dominant language
- Haskell
- Stars
- 467
- Forks
- 225
- PR merge metrics
- No merged PRs in 30d
Description
Once a user is marked as deleted, their username becomes free for reuse. However, they still show up in user group listings, and their name links to the user page currently with that username, which could by now be someone else.
Moreover, the group membership editing functions are keyed by username, and that username no longer resolves to their user ID, so we can't remove the group membership via the API anymore. (And user undeletion is not implemented yet, so I can't fix this!)
I think likely deleting a user should remove all group memberships. If we have some way to reliably ensure groups never contain deleted members, so much the better, but if not we may also want to modify the groups logic to not show deleted users, or to flag that the user is deleted.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.