/kbin RTR#2 User profile visibility options and an improved account deletion process
/kbin RTR#2 User profile visibility options and an improved account deletion process
This update adds additional user account visibility options and improves the process of deleting user accounts and magazines for the instance administrator. It also introduces private user accounts and magazines similar to options known from Mastodon.
- ability to delete an account in the user panel
- additional timestamp indication for the deletion account request
- ability to withdraw the deletion account request
- cron for automatic deletion of marked accounts (@todo)
- ability to suspend a user account (the account is not permanently deleted, but threads, posts and comments cease to be visible on the instance)
- ability to reinstate a user account
- the new 'deletion' section in the administrator panel, which assists in managing the accounts and magazines marked for deletion
- responding to a small portion of emails from the contact form
Time remaining for the kbin.social update: ? days.
@ernest Also careful with that “suspend account" language, as it means a very different thing in a trust & safety context across the fediverse — perhaps “pause account” or "take a break”?
Good point. When I get back to this task, I will change the name of this action.
@ernest Why does the admin need to be told you want to delete your account? Why isn't it self-service?
Ultimately, it will be a fully automatic process - in the upcoming updates, the cronjob will be refined. However, in this case, it seems to me that confirmation via a link from an email or some time delay in case of a potential misclick might be necessary. Besides, I have actually received quite a few emails requesting to retract the account deletion request after some time. Currently, I want to control this to ensure that all accounts are correctly and permanently deleted, as occasionally, due to certain errors, actions get stuck in the queue.
@ernest you could always schedule the deletion? Like mark the account as scheduled for deletion so you can't post or anything, but you can access this page to cancel the scheduled deletion.
Involving a second factor of email for confirmation also sounds wise here