Anonymise expired order

[korycins]

Problem

With the system to expire orders that are not paid, we need a solution to handle expired orders.
The proposition is to have a task, that will anonymize the expired orders after some time.
For all expired orders older than TTL, we should remove everything that is related to user.

---

1. General Assumptions

We are introducing a new Celery task that will be responsible for anonymizing all expired orders after exceeding the provided TTL.

Everything related to the user and attached to the order should be anonymized, including order.user, order.email, order.shipping_address, order.billing_address, and order.user_email.

The Celery task should be capable of handling high load. As an example implementation, we can use the one from issue #11257. The Celery beat should trigger the task once per day, and we should ensure that we do not call all high load Celery tasks at the same time.

The TTL (time-to-live) for anonymizing expired orders will be controlled by staff users through channel settings, similar to the one used for controlling expiring orders. Staff users will be able to provide a value in days (new scalar) within a range defined by Saleor, which is proposed to be from 1 to 60 days. The default value is 30 days.

For example, if an order expires on 2023-Jan-01 00:00:00 with the default value, it will be anonymized on 2023-Jan-31.

Acceptance Criteria

• A staff user can set a Time To Live (TTL) for anonymizing orders.
• Settings can be set by a user with permissions: MANAGE_ORDERS or MANAGE_CHANNELS
• Once the TTL has expired, the order should have all user details removed.

2. API changes

"""
The `Day` scalar type represents number of days by integer value.
"""
scalar Day

input OrderSettingsInput @doc(category: "Orders") {

  """Anonymize expired orders time in days. Default 30. Enter 0 or null to disable. """
  anonymizeExpiredOrdersAfter: Day
}

type Channel {
   ...
   anonymizeExpiredOrdersAfter: Day!
}

3. Database changes

class Channel(models.Model):
    ...
    anonymize_expired_orders_after = models.IntegerField(default=None, null=True, blank=True)

class Order(models.Model):
    ...
    expired_at = models.DateTimeField(null=True, blank=True)

The expired_at field will be used to determine whether an order should be anonymized.

5. To Do list

Tasks

Beta Give feedback

1. Add a Celery task to anonymize expired orders.
2. Configure a Celery beat to trigger the implemented task.
3. Extend the Channel input to accept a new value to control the time-to-live (TTL) of anonymization.
4. Provide a zero-downtime migration.
5. Extend expire task to set up expired_at value