Delete Users

[pozylon]

Currently, when a customer wants to remove customer data because of privacy, he needs to overwrite the user with cryptic data because there is no user deletion :)

Actually deleting would have an effect on:

ProductReviews.author
...

[Mikearaya]

duplicate of #50

[pozylon]

The solution we are proposing regarding that matter will be the introduction of a user delete method and mutation which will essentially:

• Mark user as deleted
• Keep userId
• Anonymize the e-mail with userID@deleted.unchained.local
• Remove all optional profile data, overwrite all existing required profile data
• Remove all tokens, remove IP information etc.

That way we still have an auditable system and no broken order histories, product reviews etc.

[pozylon]

Okay, after discussion with @Mikearaya we do this in 2 steps:

1. Phase: Simple Deleted Flag

• Keep User as is with all data, but set DELETED status
• Rename e-mail to e-mail@deleted_(random-hash).unchained.local
• Rename username to username-deleted_(random-hash).
• Add simple button to controlpanel to trigger that mutation
• Change inner working of unchained to always skip deleted users when querying and restrict userId as input to check for deleted status
• Expose status in GraphQL API on User entity to everybody (public)

2. Phase: Right to Forget

• Extend User query to get removed users
• A special button for removed users to remove them completely
• Requirements not clear yet: completely erase all private data? anonymize? how?
• Will lead to change of historic data maybe

3. Phase: Tackle other Main data with deletion flags

• Countries
• Currencies
• Languages
• (Assortments)
• ((Filters))

[pozylon]

Due to the fact that most users have additional data stored on the user and 3rd party collections, a permanent removal of a user doesn't make sense by default. Right to forget (GDPR) rules should be enforced by custom implementations that cover all the data that is potentially containing personal data.

[pozylon]

A simply soft deletion for users is implemented now