Admin Panel Anonymization turned all itself and no way to turn it off

[alevashov]

We run Magesuite (latest version installed through composer ~ 7 days ago) at Magento ver. 2.3.2-p2 PHP ver 7.2

At some point I've noticed that order and user data in admin started to be anonimized, as it is described at page 241 of MageSuite user guide. Screenshot attached

The issue that I haven't (at least deliberately) enabled that anonymization feature and now there is no way to disable it, I don't see GDPR user role in System/Permissions/User Roles.

Only action that I think may lead to that is changing merchant country to EU member (Austria), but changing it back to default US doesn't help - customer and order data is still anonymized.

Detailed information about modules versions: +------------------------------------------------------+------------------+ | Name | (Schema) Version | +------------------------------------------------------+------------------+

| MSP_ReCaptcha | 1.5.0 |

| Amazon_Core | 3.2.9 | | Amazon_Login | 3.2.9 | | Amazon_Payment | 3.2.9 | | Dotdigitalgroup_Email | 3.1.2 | | Klarna_Core | 5.1.0 | | Klarna_Ordermanagement | 5.0.2 | | Klarna_Kp | 6.1.1 |

| MSP_TwoFactorAuth | 3.1.0 | | MageMojo_Cron | 1.3.0 | | MageSuite_Frontend | 1.0.1 | | MageSuite_Cache | 1.0.0 | | MageSuite_Category | 1.0.0 | | MageSuite_CategoryHero | 0.1.0 | | MageSuite_CategoryIcon | 1.0.0 | | MageSuite_ClearAttributes | 1.0.0 | | MageSuite_CmsDuplicate | 0.0.1 | | Smile_ElasticsuiteCore | 0.0.1 | | MageSuite_ContentConstructor | 1.0.0 | | MageSuite_CommonBlocks | 1.0.0 | | MageSuite_ContentConstructorAdmin | 1.0.0 | | Smile_ElasticsuiteCatalog | 1.5.1 | | MageSuite_ContentConstructorAsset | 1.0.0 | | MageSuite_ContentConstructorCategory | 1.0.0 | | MageSuite_ImageResize | 1.0.0 | | MageSuite_CssMinifier | 1.0.0 | | MageSuite_DailyDeal | 1.0.0 | | MageSuite_DeferJs | 1.0.0 | | MageSuite_DynamicDirectives | 1.0.0 | | MageSuite_ElasticSuiteAddons | 1.0.2 | | MageSuite_EmailAttachments | 2.0.0 | | MageSuite_ExtendedException | 1.0.0 | | MageSuite_FileUpload | 1.0.2 | | MageSuite_BrandManagement | 1.0.1 | | MageSuite_Gdpr | 1.0.0 | | MageSuite_GoogleApi | 1.0.0 | | MageSuite_ImageOptimization | 1.0.0 | | Smile_ElasticsuiteSwatches | 0.0.1 | | MageSuite_JsTranslationFix | 1.0.0 | | MageSuite_MaintenancePage | 1.0.0 | | MageSuite_Media | 1.0.0 | | MageSuite_Navigation | 1.0.3 | | MageSuite_Opengraph | 1.0.4 | | MageSuite_Pagination | 1.0.0 | | MageSuite_PersistentSitemap | 1.0.0 | | MageSuite_ProductBestsellersRanking | 1.0.0 | | MageSuite_ProductDetailsReorder | 1.0.0 | | MageSuite_ProductPositiveIndicators | 1.0.5 | | MageSuite_ProductTile | 1.0.0 | | MageSuite_SentryIo | 1.0.0 | | MageSuite_SeoCanonical | 1.0.1 | | MageSuite_SeoHreflang | 1.0.0 | | MageSuite_SoftDbStatusValidation | 1.0.0 | | MageSuite_Sorting | 1.0.0 | | MageSuite_ThemeHelpers | 1.0.0 | | MageSuite_ThumbnailRemove | 1.0.0 | | MageSuite_TranslationCenter | 0.1.0 | | MageSuite_UrlRegeneration | 1.0.0 | | MageSuite_UrlRewrite | 1.0.0 | | MageSuite_UrlRewriteMassActions | 1.0.0 | | MageSuite_CmsProductBacklink | 1.0.0 | | Smile_ElasticsuiteCatalogRule | 1.0.0 | | Smile_ElasticsuiteCatalogOptimizer | 1.2.0 | | MageSuite_ContentConstructorFrontend | 1.0.4 | | MageSuite_CmsTagManager | 1.0.0 | | Smile_ElasticsuiteThesaurus | 1.0.0 | | Smile_ElasticsuiteVirtualCategory | 1.4.1 | | Temando_Shipping | 1.5.0 | | Vertex_Tax | 100.3.0 | +------------------------------------------------------+------------------+

[diwipl]

GDPR is enabled by default and has to be explicitly disabled using roles permissions.

This is done to ensure that you have to explicitly disable it for persons that should have access to customers data.

[alevashov]

Thanks, that helped

It's a bit counter-intuitive, but after I created a new role and disabled GDPR and Hide Customer data there it worked

I would suggest to change user guide text like:

In MageSuite you can anonymize the sales data in the admin panel. This enhances security and according to GDPR art. 5 (1) the data processing company should use the highest security standards possible. GDPR data anonymization is enabed by default for default Magento admin users.

Figure 201 Anonymized Sales area in admin panel (admin panel)

In order to disable data anonymization, create a new role in SYSTEM / PERMISSIONS / ALL USERS. In role permissions uncheck GDPR and "Hide customer data" checkboxes (screenshot attached).

[alevashov]

I guess it can be closed, since technically all works, my suggestion is just makes things clear in documentation, if you have documentation open-sourced somewhere, happy to do that in line with the text above and make a pull request