On 10/20/20 12:29 AM, Stephen J. Turnbull wrote:
Brian Carpenter writes:
You don't really think that this is an issue which means it will be years before it is addressed.
You're making the classic mistake of reporting an issue assuming that your *proposed *fix* is the *issue*. Mark replies that the immediate issue is not that a database record of the user is retained, it's that there's no way for an authenticated user or even an authenticated list admin to change that user's display name in the database. It's a database, there *is* a way to change it in Mailman, it's "just" that it requires site admin intervention. (Assume "just" is marked with the nonexistent sarcasm emoji.)
I reported a serious problem. The reply was to bring up assumptions that should not be made such as a list member is actually a registered user. As you said they are not. List members are treated differently but I think they are not. Regardless of whether they are just a list member or a list member that is also a registered user, there is NO MECHANISM in place where you can change their associated display name AND their data is not entirely removed when a reasonable assumption is being made that it has, such as list unsubscribing. Sorry but I can't see how this behavior can be justified and also not being made a high priority to fix.
It's arguable that there should *also* be a way for a person to delete their user entirely (in fact, some interpretation of GDPR say that "it's the law" :-). But that's not the immediate issue faced by *this* user and list admin, and I doubt deleting the user object is a big issue for users (but it might be for admins because of GDPR etc).
Whether it gets addressed this week or sometime in the next few months or in the summer is something you're more than welcome to advocate. Like Mark, I recommend filing an issue.
Steve
Some may think that retaining data when there is a reasonable assumption that it is being removed is immoral and not just a violation of GDPR. As I said in my reply to Mark, it is a big deal for list owners (admins) because they are the ones that are going to be interacting with Postorius/Affinity the most. Most list members, especially those migrating from MM2, will not be registering with Postorius/Affinity. List owners/moderators have no choice.
--
Brian Carpenter Harmonylists.com Emwd.com