lemmy icon indicating copy to clipboard operation
lemmy copied to clipboard

Allow import/export of user data for banned accounts.

Open kovalensky opened this issue 2 years ago • 7 comments

Requirements

  • [X] Is this a feature request? For questions or discussions use https://lemmy.ml/c/lemmy_support
  • [X] Did you check to see if this issue already exists?
  • [X] Is this only a feature request? Do not put multiple feature requests in one issue.
  • [X] Is this a backend issue? Use the lemmy-ui repo for UI / frontend issues.

Is your proposal related to a problem?

Follow up of https://github.com/LemmyNet/lemmy/pull/3976#issuecomment-1742672503

It would be nice to have this feature.

Describe the solution you'd like.

Ability to export account data even if the account is banned.

Describe alternatives you've considered.

None

Additional context

No response

kovalensky avatar Oct 06 '23 13:10 kovalensky

This is very important in my opinion, similar to #3973 Data protection issues for banned accounts is very important because it prevents malicious actors from leveraging GDPR or CCPA against platforms by allowing the user to access and delete data even when "Banned" while forbidding them from accessing the site.

Obviously just like that one it needs an implementation that allows logging in when banned but not posting, voting, or commenting (likely other restrictions such as well).

DraconicNEO avatar Oct 24 '23 06:10 DraconicNEO

Are banned users currently able to delete their accounts?

Edit: they're not, and this issue (letting banned users delete their data) is a distinct bug = #3973

maltfield avatar Feb 07 '24 17:02 maltfield

Are banned users currently able to delete their accounts?

Edit: they're not, and this issue (letting banned users delete their data) is a distinct bug = #3973

I don't think it's a bug, more of an oversight. It was very much an intentional choice to not let banned users log in. It's just a bad choice because of the severe problems that it causes when it comes to those pesky data regulations.

DraconicNEO avatar Feb 07 '24 20:02 DraconicNEO