wintercms / wintercms/wn-user-plugin
Users are unable to fully delete their own account
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 13
- Forks
- 20
- Avg merge
- 50m
- Merged PRs (30d)
- 1
Description
The plugin currently provides no way for a user to fully delete their own account - the only option currently available is to deactivate the user's account via the Account component, which soft-deletes the user account but keeps it available in the system. The user account is still visible to administrators, and can be re-activated by simply logging in again.
Given the movement towards data privacy and the right to be forgotten that is happening across the world, it feels prudent that we allow people to delete their own accounts permanently if they wish.
This could perhaps be allowed as a setting, or via another action in the Account component.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by inspecting the Account component and its existing deactivation flow. Clarify whether permanent self-deletion should be a setting or a separate action, then define completion as the account being permanently deleted, no longer visible to administrators, and unable to be reactivated by logging in.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- authentication
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100