Skip to content
This repository has been archived by the owner on Apr 26, 2024. It is now read-only.

Deactivate user with erase: true does not delete user displayname in historical membership events as it is mentioned in the doc GDPR issue #15355

Open
AnassDriate opened this issue Mar 30, 2023 · 1 comment
Open

Deactivate user with erase: true does not delete user displayname in historical membership events as it is mentioned in the doc GDPR issue #15355

AnassDriate opened this issue Mar 30, 2023 · 1 comment
Labels
A-Account-Deactivation "Deleting"/"Removing" a user, GDPR erasure (erased) A-Docs things relating to the documentation A-Moderation Tools for moderating HSes: event redaction, media removal, purge admin API, reports from users, ... O-Occasional Affects or can be seen by some users regularly or most users rarely S-Major Major functionality / product severely impaired, no satisfactory workaround. T-Enhancement New features, changes in functionality, improvements in performance, or user-facing enhancements.

Comments

@AnassDriate
Copy link

AnassDriate commented Mar 30, 2023 •
edited by MadLittleMods
Loading

Description

Hello,

In the official documentation, erase : true should delete displayname BUT is not the case

I am still able to see the user display name when I query our room.

Screenshot 2023-03-30 at 17 58 37

Steps to reproduce

  1. Create a user with a displayname
  2. Deactivate a user with erase : true
  3. Query the room where the user was joined

Homeserver

my private server

Synapse Version

synapse version 1.79

Installation Method

Debian packages from packages.matrix.org

Database

postgres

Workers

Single process

Platform

All

Configuration

No response

Relevant log output

Please see the attached picture

Anything else that would be useful to know?

No response
@AnassDriate AnassDriate changed the title Desactivate user with erase : true does not delete user displayName Desactivate user with erase : true does not delete user displayName as it is mentioned in the doc GDPR issue ! Mar 31, 2023
@squahtx squahtx added A-Docs things relating to the documentation A-Moderation Tools for moderating HSes: event redaction, media removal, purge admin API, reports from users, ... S-Major Major functionality / product severely impaired, no satisfactory workaround. T-Defect Bugs, crashes, hangs, security vulnerabilities, or other reported issues. O-Occasional Affects or can be seen by some users regularly or most users rarely labels Mar 31, 2023
@MadLittleMods MadLittleMods changed the title Desactivate user with erase : true does not delete user displayName as it is mentioned in the doc GDPR issue ! Deactivate user with erase : true does not delete user displayName as it is mentioned in the doc GDPR issue ! Apr 3, 2023
@MadLittleMods MadLittleMods changed the title Deactivate user with erase : true does not delete user displayName as it is mentioned in the doc GDPR issue ! Deactivate user with erase : true does not delete user displayName as it is mentioned in the doc GDPR issue ! Apr 3, 2023
@MadLittleMods MadLittleMods added the A-Account-Deactivation "Deleting"/"Removing" a user, GDPR erasure (erased) label Apr 3, 2023
@MadLittleMods MadLittleMods changed the title Deactivate user with erase : true does not delete user displayName as it is mentioned in the doc GDPR issue ! Deactivate user with erase : true does not delete user displayName as it is mentioned in the doc GDPR issue Apr 3, 2023
@MadLittleMods MadLittleMods changed the title Deactivate user with erase : true does not delete user displayName as it is mentioned in the doc GDPR issue Deactivate user with erase : true does not delete user displayname as it is mentioned in the doc GDPR issue Apr 3, 2023
@MadLittleMods
Copy link
Contributor

MadLittleMods commented Apr 3, 2023 •
edited
Loading

👍 Synapse could redact all historical m.room.member events for a given user.

There would be an edge case for forgotten rooms that the server is no longer participating in and I suppose for any room that the user has left in general (might play into valid membership transitions although it wouldn't be changing any state).

Also due to the decentralized/federated nature of Matrix, redactions are a best-effort system and a request for participating servers to remove the information. Although, it's still good in any case for your local homeserver to do the cleanup and stop handing out the information. See https://matrix.org/docs/guides/moderation#redactions-aka-removing-messages

@squahtx squahtx added T-Enhancement New features, changes in functionality, improvements in performance, or user-facing enhancements. and removed T-Defect Bugs, crashes, hangs, security vulnerabilities, or other reported issues. labels Apr 3, 2023
@squahtx squahtx changed the title Deactivate user with erase : true does not delete user displayname as it is mentioned in the doc GDPR issue Deactivate user with erase: true does not delete user displayname in historical membership events as it is mentioned in the doc GDPR issue Apr 3, 2023
@matrixbot matrixbot mentioned this issue Dec 21, 2023
Closed
pabelenda pushed a commit to psaavedra/synapse that referenced this issue May 1, 2024
@S7evinK
Redact membership events if the user requested erasure upon deactivat…
4777323 
…ing (#17076)

Fixes matrix-org#15355 by redacting all membership events before leaving rooms.
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
A-Account-Deactivation "Deleting"/"Removing" a user, GDPR erasure (erased) A-Docs things relating to the documentation A-Moderation Tools for moderating HSes: event redaction, media removal, purge admin API, reports from users, ... O-Occasional Affects or can be seen by some users regularly or most users rarely S-Major Major functionality / product severely impaired, no satisfactory workaround. T-Enhancement New features, changes in functionality, improvements in performance, or user-facing enhancements.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@MadLittleMods @squahtx @AnassDriate