Skip to content
This repository has been archived by the owner on Nov 30, 2022. It is now read-only.

Explain Privacy Request Execution [#1397] #1396

Merged
merged 4 commits into from
Sep 29, 2022

Conversation

pattisdr
Copy link
Contributor

@pattisdr pattisdr commented Sep 27, 2022

Purpose

We have guides talking about how to configure Fidesops but we're missing a high-level explanation of how Privacy Request Execution works.

Changes

  • Add a Fidesops Privacy Request Execution page to the docs
  • Clarify how authentication is setup for Policy Webhooks

Checklist

  • Update CHANGELOG.md file
    • Merge in main so the most recent CHANGELOG.md file is being appended to
    • Add description within the Unreleased section in an appropriate category. Add a new category from the list at the top of the file if the needed one isn't already there.
    • Add a link to this PR at the end of the description with the PR number as the text. example: #1
  • Applicable documentation updated (guides, quickstart, postman collections, tutorial, fidesdemo, database diagram.
  • If docs updated (select one):
    • documentation complete, or draft/outline provided (tag docs-team to complete/review on this branch)
    • documentation issue created (tag docs-team to complete issue separately)
  • Good unit test/integration test coverage
  • This PR contains a DB migration. If checked, the reviewer should confirm with the author that the down_revision correctly references the previous migration before merging
  • The Run Unsafe PR Checks label has been applied, and checks have passed, if this PR touches any external services

Ticket

Fixes #1397

@pattisdr pattisdr changed the title Explain Privacy Request Execution Explain Privacy Request Execution [#1397] Sep 27, 2022
@pattisdr
Copy link
Contributor Author

pattisdr commented Sep 27, 2022

@conceptualshark, @ethyca/docs-authors Sean asked me to take a stab at a first draft of how Privacy Request Execution works, for the guides, separate from how we configure Fidesops.

@pattisdr pattisdr marked this pull request as ready for review September 27, 2022 22:51
Copy link
Contributor

@conceptualshark conceptualshark left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks so much for drafting this out. 👍 I ran through and cleaned up some of the formatting, and clarified a few things. Let me know if that works!

Copy link
Contributor Author

@pattisdr pattisdr left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks for your improvements @conceptualshark!

6. Email Erasure Requests Step
7. Policy Post-Execution Webhooks Step
8. Follow-up Email Notification Step
Manual webhooks allow data pertaining to be manually uploaded by a fidesops admin. If manual webhooks are enabled, request execution will exit with a status of `requires_input` until a submission has been received for each manual webhook configured. The privacy request can then be resumed, and request execution will continue from this step. See [Manual Webhooks](manual_webhooks.md) for more information on configuration options and resuming a `requires_input` request.
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Missed words, maybe "Manual webhooks allow data pertaining to a subject"

Fidesops admins should separately upload data for each webhook, or a blank response if no data is found. The privacy
request can then be resumed, and request execution will continue from this step. See [Manual Webhooks](manual_webhooks.md) for more information
on configuring manual webhooks and resuming a `requires_input` request.
Fidesops sends a request to each pre-execution webhook with a [policy webhooks request format](policy_webhooks.md#policy-webhook-request-format), which your endpoints should be prepared to unpack. If you need more time to carry out an action, your webhook can instruct Fidesops to `halt`, which will cause execution to exit with a status of `paused`. Request execution can be continued when ready using a token supplied in the original request.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lowercase "Fidesops to halt"?

reach a Collection, it will exit early with a status of `error`. To remedy, you will have to
how your Collections are related to each other in your Datasets and resubmit the privacy request.
Fidesops builds a Directed Acyclic Graph, or DAG, where each location or node corresponds to a Collection in one of your Datasets. The graph helps determine the order in which nodes will be visited. Fidesops begins with any Collections that can be queried using the supplied identity data, and then points those Collections toward dependent Collections, etc. If fidesops can't determine out how to reach a Collection, it will exit early with a status of `error`. To remedy an errored access request, you update how your Collections are related to each other in your Datasets, and resubmit the privacy request.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just checking, is determine out how to reach intentional or would it be determine how to reach

@conceptualshark
Copy link
Contributor

🙏 Thank you for the proofread! Should be all set.

@pattisdr pattisdr merged commit 060152b into main Sep 29, 2022
@pattisdr pattisdr deleted the fidesops_workflow_documentation branch September 29, 2022 14:05
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Explain Fidesops Privacy Request Execution
2 participants