mysociety / alaveteli

Provide a Freedom of Information request system for your jurisdiction
https://alaveteli.org
Other
387 stars 195 forks source link

Allow for the speedy deletion of requests that are not FOI and have sensitive information #3979

Open crowbot opened 7 years ago

crowbot commented 7 years ago

In the interests of not holding information that there's no reason to hold, we'd like Alaveteli admins to be able to simply and quickly delete requests that are not FOI requests and that include personal information. At the moment admins can delete a request without automatically notifying the requester. Opening this ticket for discussion of further development work that would be useful here. We could:

RichardTaylor commented 7 years ago

I just tried to delete a request containing personal information. I destroyed the request via the request admin page; however the text remained on the user page under the "Post redirects" presumably as the request had been drafted prior to logging in.

In this specific case it would have been OK to "destroy" the user account; however that isn't an option available to administrators.