View Issue Details

IDProjectCategoryView StatusLast Update
0003386HTML & PERLBug Report - Interfacepublic2019-12-12 11:04
ReporterHinoe Assigned ToDerIdiot  
PrioritynormalSeverityminorReproducibilityhave not tried
Status resolvedResolutionfixed 
Summary0003386: DB entries lists: deleted users' lists unavailable, access denied error, but they're not personal data

The lists of DB data points a user added, data points which is already open for all to see, are not personal data no matter how you spin it. Access to them is necessary for data moderation purposes and limited to the people who need them to begin with. The fact a given user was deleted is no reason to bar people who otherwise have the correct permissions from seeing those lists. A situation that lets users break an important moderation feature facilitates abuse (add a bunch of crap data all around, delete your account, see how happy everyone becomes about hunting your adds, it's super effective), and a needlessly broken feature is effectively a bug.

Example case:
TagsNo tags attached.


There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2019-10-15 01:47 Hinoe New Issue
2019-12-12 11:04 DerIdiot Assigned To => DerIdiot
2019-12-12 11:04 DerIdiot Status new => resolved
2019-12-12 11:04 DerIdiot Resolution open => fixed