[buddypress-trac] [BuddyPress Trac] #9160: Anonymising message data for deleted users in the REST API

buddypress-trac noreply at wordpress.org
Tue May 21 08:07:55 UTC 2024


#9160: Anonymising message data for deleted users in the REST API
-------------------------+-----------------------------
 Reporter:  niftythree   |      Owner:  espellcaste
     Type:  enhancement  |     Status:  new
 Priority:  normal       |  Milestone:  Awaiting Review
Component:  REST API     |    Version:  12.5.0
 Severity:  normal       |   Keywords:
-------------------------+-----------------------------
 Hi,

 We've noticed a difference between how the private messages of a deleted
 user are handled within the REST API, compared to the website.

 If a user on the website deletes their account after sending messages, the
 other recipients within a private message thread can still read the
 thread, but will see "Deleted User" in place of the deleted user's Name,
 and [deleted] for any messages the deleted user has sent.

 In the REST API, all of the private messages sent by a deleted user are
 still visible. Is it possible for the REST API to anonymise this data in
 the same way that the website does, so that there's parity between the
 two?

 We've tested all of the above with the following set-up:
         • WordPress version: 6.5.3
         • BuddyPress version: 12.5.0
         • BuddyPress Template: Legacy
         • Theme: Twenty Twenty-Four
         • Plugins active: BuddyPress, JSON Basic Authentication
 (https://github.com/WP-API/Basic-Auth)
         • PHP: 7.4

 Thanks.

-- 
Ticket URL: <https://buddypress.trac.wordpress.org/ticket/9160>
BuddyPress Trac <http://buddypress.org/>
BuddyPress Trac


More information about the buddypress-trac mailing list