---
# System prepended metadata

title: Deletion and Anonymization of Users
tags: [KISD, Kunden, TH]

---



# Deletion and Anonymization of Users


## Löschkonzept

Löschdatenbank für user. 
- Matrikelnummer
- CampusID
- System, das Zugriff hat
- Zeitstempel


max 400 Leute. können in der liste stehen
die Liste wird ab und an geräumt.
leute aus der liste 

mal 6 monate nachlaufzeit. 

sos triggert
1. former student (studium beendet). 6 monate darf er alles. ref3 definiert. anschließend
2. nichts mehr machen (6monate). zugriff entzogen. archiv-objekt. (matchen für master z.B.). hier wird in die löschliste geschrieben.

Lehrbeauftragte haben 1 Jahr nachlaufzeit.

CampusID kann nicht mehrfach vergeben werden.

treiber sind aktive prozesse, die ...


idm vergleicht nutzer ... olaf mail... campus-id => darf löschen.

wir machen eine liste: welcher user hat welchen status? (aktiv, former, deleted)
- einschränken auf aktive?!

TH Spaces -> Web Request TBD-Service-Adresse von Boris mit JSON Liste aller SAML-User (Camput Ids im Th Spaces)

Antwort -> Status zu jeder ID: aktive, Ablaufdatum, abgelaufen, Fehler (gab es nie), invalid

TH-Spaces: zum Ablaufdatum oder falls Benutzer im ID deaktiviert, setzen wir den User auf deaktiviert TH-Spaces: Wenn User abgelaufen ist, dann anonymisieren wir.



## Concepts for deleting Users

### C1: Cron job checking if a user is still in LDAP
👎❓ Can we check against the IDM (Senat)?

### C2: Handing out Tickes (Like Sciebo)
👍 Only Saml is required
👍 Getting rid of users, who are no longer active
👍 Remember users, that spaes exists.
👎 Edge-Case: Professor, who likes to keep his Spaces-Profile receives an email every 6? Months?


# Questions
- What is deleted, what is anonymized?
- Can Students/Users decide, what is deleted (GDPR)?
- Is an export required?
- How long is the grace period.
- Can we check against the IDM which user still exists (and don't require a senat decision?)
- Do we need LDAP access anyway to invite users who have never logged in? Elisabeth: no, we dont want that (220928) 
- #delete-user-log How long do we have to keep the log?

# Descisions? (by somebody?)

1. Once you are out, you don't gain access to your old data.

# Status Quo

- We can currenlty delete users from the network (with a WP-Native interface)
  Posts can be either deleted or assigned to another user
  WP does not delete/re-assign comments by default
- WP can deal properly with post and comments which don't have an assigne user-id
- We implemented a feature to anonymize posts (in the defaultspace)
- We don't have a problem whith emoji-reactions (reactions are saved whith a user-id, non existing users don't whow)

# Requirements
- Log when a user is deleted. #delete-user-log

# Things to implement
- ❓ #delete-user-log add feature to spaces-log to keep logs for a certain amount of time
- ❓ #delete-user-log Email to somebody?!
- Show spaces-log in backend.


###### tags: `KISD` `TH` `Kunden`