smartstore / Smartstore

A modular, scalable and ultra-fast open-source all-in-one eCommerce platform built on ASP.NET Core 7
http://www.smartstore.com/
GNU Affero General Public License v3.0
1.16k stars 427 forks source link

Deleted customer cannot use same email addres again #300

Open TripleNico opened 4 years ago

TripleNico commented 4 years ago

When a customer get's deleted via the UI than the customer gets the Deleted flag in the database. However when the customer want to sign up again for some reason than they can't use the same email address because it still exists in the database but with the Delete flag set. Is this by design and what would be the right way to use that email address again?

AbdonDeKousemaeker commented 4 years ago

Delende is Field Deleted op 1 True Fysiek is ie er dus nog. En als e-mailadres uniek is dan krijg je dit.

Abdon De Kousemaeker Mobile: +31 612 8380 12 Email: abdon@koomba.eu

Tel: +31 10 204 55 25 | www.koomba.euhttps://www.koomba.eu/ | Post: Postbus 1632 - 3260 BC OUD-BEIJERLAND | Visit: Brainpark II - Lichtenauerlaan 102 - 3062 ME ROTTERDAM

On 07.05.2020, at 14:15, TripleNico notifications@github.com wrote:



When a customer get's deleted via the UI than the customer gets the Deleted flag in the database. However when the customer want to sign up again for some reason than they can't use the same email address because it still exists in the database but with the Delete flag set. Is this by design and what would be the right way to use that email address again?

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHubhttps://github.com/smartstore/SmartStoreNET/issues/1881, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AH56W5ZIKXPWTNP67TDLTXLRQKQ4JANCNFSM4M3IWUGQ.

mgesing commented 4 years ago

Is this by design and what would be the right way to use that email address again?

The correct way is to deactivate the customer instead of deleting him (if there is still a small possibility that the customer could become active again later). A deleted customer must therefore use a different email address to become active again or the merchant must replace it in the database so that the user can register with it once again.

The GDPR plugin has an option "Anonymize on (soft) deletion" which automatically anonymizes a customer's data (including the email address) when the customer is deleted.

Belott commented 1 year ago

In my view, this is a clear bug that should be fixed. The error message, when the customer registers again, does not correspond at all to the information that the shop operator sees in his customer list. Therefore: A deleted customer account should really be completely deleted so that the customer can register again at any time with the same customer information (account name, email).