Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Effects to the system when deleting a user may not be clear (and are unavoidable) #1335

Open
Lotterleben opened this issue Jan 15, 2024 · 2 comments · May be fixed by #1343
Open

Effects to the system when deleting a user may not be clear (and are unavoidable) #1335

Lotterleben opened this issue Jan 15, 2024 · 2 comments · May be fixed by #1343
Labels
Priority: High This is urgent and important. Type: Bug(fix) A bug or a fix for a bug.

Comments

@Lotterleben
Copy link
Contributor

We had the following happen on our Engelsystem instance:

  1. Team member who also had admin access was integral to our shift planning created lots of shifts from their account
  2. Team member left the team and deleted their account using the admin account
  3. all the shifts they've created are gone, leading to mayhem in our shift planning

It took us a while to figure out where all the shifts had gone until we made the connection.
I'm assuming no malicious intent on the leaving team members' side. When I reproduced the error on my local instance, I noticed that the error message was somewhat ambiguous – I would've interpreted "including all his shifts and every other piece of his data" as the shifts they've applied to not as the shifts they've created too.

Imo, a quickfix would be to reword the "Do you really want to delete the user" message to make this side effect more clear, for example:

Deleting this user will not only delete their personal data, but also the changes they've made to the system, e.g. shifts or locations they have created.
Are you sure you want to do this?

However, ideally, I think it'd be better to offer the user two choices:

  1. migrate the content they've created and just delete their personal account (e.g. if they're just leaving)
  2. delete the user and their content (e.g. if they've acted maliciously)

I'd be happy to open a PR for the quickfix. The more intricate version is probably outside of my skillset.

@msquare
Copy link
Member

msquare commented Jan 15, 2024

Omg, thank you for reporting that!

@MyIgel MyIgel added the Type: Bug(fix) A bug or a fix for a bug. label Jan 16, 2024
@MyIgel
Copy link
Member

MyIgel commented Jan 16, 2024

Thats a valid point and the option to "move shifts to current user" (and a checkbox to not do so thus deleting them too) would be my preferred solution here as its imho the cleanest.

@MyIgel MyIgel added the Priority: High This is urgent and important. label Jan 27, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Priority: High This is urgent and important. Type: Bug(fix) A bug or a fix for a bug.
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants