[openstreetmap/openstreetmap-website] Allow a deleted account to be recovered by a password reset (PR #7360)

[Andy Allan]

gravitystorm left a comment (openstreetmap/openstreetmap-website#7360)

> I'm not totally sure if this is a good idea

I don't think this is a good idea at all. If the account is closed, then that should be that - it's closed, and shouldn't be resurrected. If the user returns and wants an account again, then they can make a new one. There's a bunch of non-reversible [stuff that happens when an account is closed](https://github.com/openstreetmap/openstreetmap-website/blob/7556a500b3528f4d4dd8dab9d9d38a5b4c94ebe0/app/models/user.rb#L249-L254). That's not even covering things that we should probably be removing from destroyed accounts (e.g. diary comments, private messages between destroyed users) since it's hard to argue for legitimate interest in keeping these in the db several years later.

It will be particularly surprising for anyone who deliberately closed their account, still remembers doing so, and then it turns out that the account and lots of personal data has been kept all along!

I think it's better to continue work on making account deletions work better, including removing email addresses, instead.



-- 
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/7360#issuecomment-5603658442
You are receiving this because you are subscribed to this thread.

Message ID: <openstreetmap/openstreetmap-website/pull/7360/c5603658442 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20260909/0aa491f5/attachment.htm>