Skip to main content

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #42976 Clear sensitive information of deleted users
    Actions
    Infos
    #42976
    Thomas Gerbet (tgerbet)
    2025-05-28 11:43
    2025-05-09 12:28
    44658
    Details
    Clear sensitive information of deleted users

    Tuleap should clear the password information of users with a deleted status. Users with a deleted status cannot be moved back to an active status so the password information will never used ever again. It is sensitive information Tuleap should not keep it.

    Globally Tuleap should not keep sensitive information like IP addresses once a user is marked as deleted.

    Authentication & LDAP
    Empty
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Thomas Gerbet (tgerbet)
    Closed
    2025-05-28
    Attachments
    Empty
    References
    Referencing request #42976

    Git commit

    tuleap/tuleap/stable

    feat:request #42976 Clear sensitive information when deleting a user 30724bb807
    User avatar Thomas Gerbet (tgerbet) , 2025-05-13 16:43
    Merge commit 'refs/changes/28/34428/2' of ssh://gerrit.tuleap.net:29418/tuleap into HEAD 0330d93040
    User avatar Kevin Traini (ktraini) , 2025-05-28 11:42
    Referenced by request #42976

    Artifact Tracker v5

    rel #41834 16.9

    Other

    gerrit #34428
    Display settings

    Follow-ups

    User avatar
    Thomas Gerbet (tgerbet)2025-05-13 15:52
    • Summary
      -Clear password and access tokens of deleted users 
      +Clear sensitive information of deleted users 
    • Original Submission
      Something went wrong, the follow up content couldn't be loaded
      Only formatting have been changed, you should switch to markup to see the changes
    User avatar
    Thomas Gerbet (tgerbet)2025-05-13 15:07
    • Summary
      -Clear password of deleted users 
      +Clear password and access tokens of deleted users 
    • Status changed from Acknowledged to Under implementation