CodeWithAloha / uipa

Helping submit, track, and share public records requests in Hawaii
http://uipa.org
MIT License
10 stars 6 forks source link

Censored text is still viewable #92

Open tyliec opened 2 months ago

tyliec commented 2 months ago

Describe the bug

The portal currently has the feature of scrubbing text from a request for privacy purposes. For example:

Image

While the << ... >> scrubbing is present in the portal UI, the text is still visible on the request's RSS/XML feeds.

Image

Example Affected Request:

Expected behavior Request text is not only scrubbed in the Web UI, but also in the RSS/XML Feeds.

tyliec commented 2 months ago

This might not actually be an issue:

Hmm…I am not sure that is something that needs to be fixed. In the end, those e-mail addresses would be disclosable as part of the public records. If the system were disclosing the user’s name (when that person did not want to be identified), that would be a different story. But I don’t think the requester’s name is disclosed in the RSS feed from what I saw of the screenshot. In fact, I question why it scrubbed the e-mails at all because now you cannot tell whose correspondence has been requested, so someone searching later would not know what had been requested previously—unless they clicked on the attachment that had the responsive records.

russtoku commented 1 week ago

If it's highly desirable to give users of UIPA.org confidence in what the system does then I think both the current behavior and the desired behavior should be clearly stated to prevent misunderstanding and unmet expectations.

Then if the current behavior isn't what's desired, further action should be taken to change the current behavior.