Add options for anonymous user vote actions

[RalfJung]

Original Title: Provide "delete" button for anonymous votes

Currently, it does not seem possible for an anonymous (as in, unregistered) vote to be deleted again. Since it is possible to edit the name and change the vote arbitrarily, that seems fairly pointless. Hence I think it would make sense to provide deleting, just like for registered users.

[RalfJung]

I trivially implemented this on my server by editing dudel/models/vote.py and changing user_can_delete to simply call user_can_edit and return that result. I can open a merge request, but I guess the issue here is mainly whether this makes sense, and not how to implement it.

[opatut]

See, the reasoning behind this is that faking someone else's vote might be obvious, while just deleting it might look like a server error or them doing something wrong. I fear people deleting opposing votes.

I guess it would be best to have (server-wide) settings for these permission options. What do you think?

[RalfJung]

I cannot follow your argumentation: People could also just change opposing votes instead of deleting them.

I'd be happy with such an option though.

[opatut]

If you wanted to forge a poll's results, what would you rather do: a) delete some votes b) edit some votes. I would always feel like a) would be the cleaner way, people would hesitate more to edit than to just delete votes, because then there is "no proof". However, you might feel different or just not care because in your user base there is no forging to be expected.

Let's go with the option, shall we? :)

[RalfJung]

However, you might feel different or just not care because in your user base there is no forging to be expected.

Exactly :) . If I worried about forging, I would be just as worried about editing as about deletion.

Let's go with the option, shall we? :)

Sure!

[femtobit]

I think it would be preferable to just hide deleted votes, keeping them in the database, and add an option to recover them. Neither allowing anyone to delete unauthenticated votes nor prohibiting this alltogether seems like a good solution.

[opatut]

:+1: