[openstreetmap/openstreetmap-website] User account self-deletion allows bad actors to delete and recreate the same account name to "lose" changeset discussion and block history (Issue #4018)

[Tom Hughes]

No, it's harder.

In the first case we add a flag to the user and have a batch job that once a day looks for users with that flag set that haven't edited recently and deletes them.

In the second case we need table of queued deletion requests (well possibly we could just use a flag on the user if we had an index on it) and then we need to build UI to alert moderators to those requests and present them with a list of pending requests and a button they can press. That means several new server routes, several new views, etc, etc.

But really none of it needs to be this hard. We had an excellent UI suggested about three hundred comments ago, we just need to get LWG to agree to it.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/4018#issuecomment-1777002374
You are receiving this because you are subscribed to this thread.

Message ID: <openstreetmap/openstreetmap-website/issues/4018/1777002374 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20231024/8a1b88de/attachment-0001.htm>