[openstreetmap/openstreetmap-website] User account self-deletion allows bad actors to delete and recreate the same account name to "lose" changeset discussion and block history (Issue #4018)

[Mateusz Konieczny]

So it would be "Can we reject all deletion requests of blocked accounts?" or maybe "Can we reject all deletion requests of vandal-only accounts?"

I guess that rare case of user with 10 000 edits banned after editing dispute and trolling asking for their account to be deleted would be survivable, the main question is can we ignore vandal-only accounts.

And "can we tell people who edited recently to request account deletion in 28 days/7 days/24 hours". Or is it needed to refer such people to DWG for review rather than refuse deletion? (on assumption that it will lower overall DWG workload, DWG would need to be consulted about this).

Or is it OK to accept their deletion request, perform deletion with delay and cancel deletion request if they will edit or be blocked in meantime?

-- 
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/4018#issuecomment-1776948909
You are receiving this because you are subscribed to this thread.

Message ID: <openstreetmap/openstreetmap-website/issues/4018/1776948909 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20231024/cc01b6ad/attachment.htm>