Univention Bugzilla – Bug 51110
Account deregistration
Last modified: 2020-04-27 17:30:21 CEST
A user should be able to 'delete' his account via the "Your profile" page of the Self Service. The feature can be activated via a UCR variable (default: deactivated) The account will not be directly deleted instead: set disabled attribute to True set new attribute "self deregistered" to True set new attribute "deregistration timestamp" Add a script (cron job) that deletes users whose "deregistration timestamp" is older then specified time period
Branch: jkeiser/4.4-4/selfservice_deregistration Branchtest: http://jenkins.knut.univention.de:8080/job/UCS%20Branch%20Test/343/
Security issue: Via the web interface you can enter any user name and get a new verification token sent to you. The e-mail address of the user is shown in the corresponding notification. Permissions: # ls -l /usr/share/univention-self-service/delete_deregistered_accounts.py -rw-r--r-- 1 root root 5574 Apr 20 11:52 /usr/share/univention-self-service/delete_deregistered_accounts.py → Missing +x flags Typo of the path in the documentation: + Der <foreignphrase>Self Service</foreignphrase> stellt unter <filename>/usr/share/univention-self-service/delete_deregistred_accounts.py</filename> "deregistred"
(In reply to Florian Best from comment #2) > Security issue: Via the web interface you can enter any user name and get a > new verification token sent to you. The e-mail address of the user is shown > in the corresponding notification. Will be fixed with a different user story > Permissions: > # ls -l /usr/share/univention-self-service/delete_deregistered_accounts.py > -rw-r--r-- 1 root root 5574 Apr 20 11:52 > /usr/share/univention-self-service/delete_deregistered_accounts.py > → Missing +x flags > > > Typo of the path in the documentation: > + Der <foreignphrase>Self > Service</foreignphrase> stellt unter > <filename>/usr/share/univention-self-service/delete_deregistred_accounts.py</ > filename> > > "deregistred" f65a600b7e Bug #51110: yaml 452c7c1309 Bug #51110: Merge branch 'jkeiser/4.4-4/selfservice_deregistration' into 4.4-4 95252f328b Bug #51110: users can now deregister their accounts Successful build Package: univention-management-console Version: 11.0.4-63A~4.4.0.202004211448 Branch: ucs_4.4-0 Successful build Package: univention-self-service Version: 4.0.3-22A~4.4.0.202004211451 Branch: ucs_4.4-0
OK: fix OK: yaml
<http://errata.software-univention.de/ucs/4.4/547.html> <http://errata.software-univention.de/ucs/4.4/548.html>
git:95252f328ba broke the documentation: > handbuch-4.4.xml:1183: <section> without @id: Selbst-Deregistrierung > manual-4.4.xml:1139: <section> without @id: Self deregistration [4.4-4] 143617b88f Bug #51110 doc: Fix user deregistration DocBook doc/manual/user-management-de.xml | 16 ++++++++-------- doc/manual/user-management-en.xml | 8 ++++---- 2 files changed, 12 insertions(+), 12 deletions(-)