T319 user delete acct #204
Conversation
|
We should address federation (T720 and T721) and then finish #203 before merging this. Also, we might hold off on this for much longer. It's possible that in certain environments, admins won't want users to be able to easily delete all data without permission. We need to understand this a bit more before we can merge this in. But all account deletion work up until this PR can go ahead. |
This mimics the admin UI for deleting a user account. Ref T319
This requires admins to generate a new encryption key with: writefreely keys generate Ref T319
|
This now uses a modal / confirmation UX similar to the admin side of things. 2021-04-22_12-56-29.mp4 |
This adds a configuration option to the [app] section: open_deletion. When true, users can delete their account on their own. Ref T319
|
This is ready for review. For admins, two things to note: You'll want to enable open account deletions through the Admin Dashboard or your config file (under the This adds CSRF protection on the account deletion endpoint, which requires a new encryption key. To generate that, run: |
|
Merging now. |
this adds a user UI component on the settings page to allow account deletion by the user
requires #202 and will maybe need a rebase