Last modified: 2014-10-17 21:49:23 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T34815, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 32815 - Add user preference to deactivate/delete user account
Add user preference to deactivate/delete user account
Status: REOPENED
Product: MediaWiki
Classification: Unclassified
General/Unknown (Other open bugs)
unspecified
All All
: Normal enhancement with 1 vote (vote)
: ---
Assigned To: Nobody - You can work on this!
https://en.wikipedia.org/wiki/Wikiped...
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2011-12-05 20:18 UTC by MZMcBride
Modified: 2014-10-17 21:49 UTC (History)
11 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description MZMcBride 2011-12-05 20:18:27 UTC
MediaWiki should have a user preference that allows users the ability to deactivate and/or delete their account. This option is available on nearly every major site and its absence on MediaWiki wikis is conspicuous and unacceptable.

Users don't care about referential integrity of the database or anything of the sort. They do care about the ability to disassociate themselves with an account whenever they want to. The current documentation on sites such as the English Wikipedia regarding account deletion is obscure, vague, and unhelpful. Regular users can understand a user preference and a confirmation page. They cannot understand needing to add obscure code to their user or user talk page (such as "{{db-user}}") or requesting an account rename (which is a bureaucratic nightmare on most wikis).

There are glaring usability problems in the current setup that should be addressed and resolved. Underlying wiki principles such as easy reversibility are also at stake. If it's so easy to create an account, surely destroying one should be equally easy.

Envisioned workflow (roughly):
* user requests account deactivation at Special:Preferences
** account is deactivated
*** block EmailUser functionality in both directions?
*** block posting to user's talk page?
*** block user from being able to edit/move/etc.?
** after specified time, account is deleted
*** if account can't be deleted due to edits or log entries, account is renamed to a random string
Comment 1 LikeLakers2 2011-12-05 20:28:28 UTC
No. This would easily allow spammers to use sockpuppets to avoid blocks much easier. If you want this on your own wiki, see [[mw:Manual:Preventing access#Removing_accounts]].

If anyone wants to reopen this, feel free to.
Comment 2 LikeLakers2 2011-12-05 20:28:43 UTC
Wrong option.
Comment 3 Chad H. 2011-12-05 20:33:11 UTC
(In reply to comment #1)
> No. This would easily allow spammers to use sockpuppets to avoid blocks much
> easier. If you want this on your own wiki, see [[mw:Manual:Preventing
> access#Removing_accounts]].
> 

I think we can support deleting accounts in MediaWiki, even if it's disabled by default. It's a VERY VERY common question (how do I delete an account). There's zero reason not to support it rather than telling people to do it by hand but scaring them with "zomg database integrity!"
Comment 4 LikeLakers2 2011-12-05 20:40:19 UTC
It can still allow a blocked user to delete their account, wait for their IP block to expire, and then create a new account. It will only encourage spamming by making it easier.
Comment 5 Chad H. 2011-12-05 20:49:21 UTC
(In reply to comment #4)
> It can still allow a blocked user to delete their account, wait for their IP
> block to expire, and then create a new account. It will only encourage spamming
> by making it easier.

If you read what I wrote, you would see "disabled by default."

There are legitimate use cases for this.
Comment 6 Brion Vibber 2011-12-05 20:53:49 UTC
I'd prefer something like this to be *enabled* by default *and* available on Wikipedia.

What's the specific issue with blocks? Is it based on the concept that the blocks would disappear? (They shouldn't.) Or that the account should completely vanish from existence totally? (It shouldn't; it'd need to be kept for logs and other audit purposes, such as ... maintaining those old blocks.)
Comment 7 MZMcBride 2011-12-05 22:30:46 UTC
(In reply to comment #4)
> It can still allow a blocked user to delete their account, wait for their IP
> block to expire, and then create a new account. It will only encourage spamming
> by making it easier.

It would be fairly trivial (one line of code) to prevent blocked users from having the option to deactivate/delete their own account. There are a lot of logistical and technical problems to overcome to resolve this bug, but I don't see this particular point as especially problematic or difficult.
Comment 8 Brion Vibber 2011-12-05 23:40:33 UTC
Everyone should be able to deactivate their account; there's no reason that being blocked should prevent that. (If anything, I'd expect blocked accounts to be a very legitimate and possibly large subset of people who'd want to go ahead and close out their accounts, if they have no desire to come back after whatever dispute or unbecoming activity they were mixed up in.)
Comment 9 Krinkle 2011-12-05 23:51:28 UTC
(In reply to comment #0)
> *** block posting to user's talk page?

Although one could discourage it by hiding 'Add section' or perhaps even requiring a special user right [1], it should still be edit/move/deletable by sysops/stewards for administrative purposes and general wiki maintenance.

- Krinkle

[1] A bit like 'edituserjs' and 'editusercss', there'd be something like 'editdeactiveateduserpages'
Comment 10 Daniel Friesen 2011-12-06 00:29:36 UTC
We let people edit the user pages of users that don't even exist. I don't see a good reason to block unrelated users from being able to touch the user's talk page.
This would just create an incentive for malicious users to register, shove spam on their talkpage, then deactivate their account so normal users can't blank the spam and mark the page for deletion.
Comment 11 Chad H. 2011-12-06 00:33:04 UTC
(In reply to comment #10)
> We let people edit the user pages of users that don't even exist. I don't see a
> good reason to block unrelated users from being able to touch the user's talk
> page.
> This would just create an incentive for malicious users to register, shove spam
> on their talkpage, then deactivate their account so normal users can't blank
> the spam and mark the page for deletion.

I think we can take off the tinfoil hat ;-) But I agree with the general sentiment that page editing/etc shouldn't be tied to this. That's what protection/deletion are for.
Comment 12 LikeLakers2 2011-12-07 22:49:00 UTC
Actually, we technically don't allow editing the userpages of users that don't exist currently. This is the main problem with this, as it would defunct [[en:WP:CSD#U2|U2]] a lot. U2 is for userpages of '''non-existant users'''.
Comment 13 Daniel Friesen 2011-12-08 01:10:59 UTC
(In reply to comment #12)
> Actually, we technically don't allow editing the userpages of users that don't
> exist currently. This is the main problem with this, as it would defunct
> [[en:WP:CSD#U2|U2]] a lot. U2 is for userpages of '''non-existant users'''.

Except, we do allow it.

I just created this userpage, on a User: that had the big red message saying the user didn't exist.
https://www.mediawiki.org/wiki/User:ThisUserDoesNotExist

WP social policy is irrelevant to this. We don't have a core restriction on the editing of userpages/usertalk for non-existent users. So we shouldn't have core code block users from editing a userpage/usertalk after the relevant user has deactivated their account.
Comment 14 MZMcBride 2011-12-08 21:11:41 UTC
I'm wondering how much of this could be piggybacked on top of the HideUser functionality that already exists in MediaWiki core. Fundamentally (or ideologically, rather), there needs to be a decision about whether MediaWiki will allow account deactivation, account deletion, or (self-)account obfuscation (which is essentially what HideUser is).

Maybe an RFC is needed to gather input? I'm not sure.
Comment 15 Elen of the Roads 2012-04-27 14:39:44 UTC
This will become more necessary if the EU succeeds in its aims (see http://www.crikey.com.au/2012/02/21/eu-privacy-laws-the-right-to-be-forgotten-is-not-censorship/) to give individuals the ability to request information be deleted when an account is closed. Although an editors contributions generally are released under CC-BY-SA, the law may not view usernames and userpages in that light.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links