Open Kelsey-Ethyca opened 1 year ago
we do not verify the phone number so someone can put in their email put another's phone number, verify their email, and have get/delete another's account data
This is not possible today
We will need a ticket to address this
@Kelsey-Ethyca , @galvana if this is still required and there's a customer behind it, can you DM me the customer so we can track?
Overview
If multiple identities are passed into a privacy request (email and phone_number) the SaaS connectors will raise the following exception
The expected behavior is that multiple identities should be supported by executing one read request per identity then consolidating the responses into a single
Row
(in this case the object representing a user/custom/account). If the individual identity requests cannot be consolidated (mismatched fields) then the request should error since the provided data most likely corresponds to two different subjects.