Last modified: 2014-10-17 21:49:23 UTC
MediaWiki should have a user preference that allows users the ability to deactivate and/or delete their account. This option is available on nearly every major site and its absence on MediaWiki wikis is conspicuous and unacceptable. Users don't care about referential integrity of the database or anything of the sort. They do care about the ability to disassociate themselves with an account whenever they want to. The current documentation on sites such as the English Wikipedia regarding account deletion is obscure, vague, and unhelpful. Regular users can understand a user preference and a confirmation page. They cannot understand needing to add obscure code to their user or user talk page (such as "{{db-user}}") or requesting an account rename (which is a bureaucratic nightmare on most wikis). There are glaring usability problems in the current setup that should be addressed and resolved. Underlying wiki principles such as easy reversibility are also at stake. If it's so easy to create an account, surely destroying one should be equally easy. Envisioned workflow (roughly): * user requests account deactivation at Special:Preferences ** account is deactivated *** block EmailUser functionality in both directions? *** block posting to user's talk page? *** block user from being able to edit/move/etc.? ** after specified time, account is deleted *** if account can't be deleted due to edits or log entries, account is renamed to a random string
No. This would easily allow spammers to use sockpuppets to avoid blocks much easier. If you want this on your own wiki, see [[mw:Manual:Preventing access#Removing_accounts]]. If anyone wants to reopen this, feel free to.
Wrong option.
(In reply to comment #1) > No. This would easily allow spammers to use sockpuppets to avoid blocks much > easier. If you want this on your own wiki, see [[mw:Manual:Preventing > access#Removing_accounts]]. > I think we can support deleting accounts in MediaWiki, even if it's disabled by default. It's a VERY VERY common question (how do I delete an account). There's zero reason not to support it rather than telling people to do it by hand but scaring them with "zomg database integrity!"
It can still allow a blocked user to delete their account, wait for their IP block to expire, and then create a new account. It will only encourage spamming by making it easier.
(In reply to comment #4) > It can still allow a blocked user to delete their account, wait for their IP > block to expire, and then create a new account. It will only encourage spamming > by making it easier. If you read what I wrote, you would see "disabled by default." There are legitimate use cases for this.
I'd prefer something like this to be *enabled* by default *and* available on Wikipedia. What's the specific issue with blocks? Is it based on the concept that the blocks would disappear? (They shouldn't.) Or that the account should completely vanish from existence totally? (It shouldn't; it'd need to be kept for logs and other audit purposes, such as ... maintaining those old blocks.)
(In reply to comment #4) > It can still allow a blocked user to delete their account, wait for their IP > block to expire, and then create a new account. It will only encourage spamming > by making it easier. It would be fairly trivial (one line of code) to prevent blocked users from having the option to deactivate/delete their own account. There are a lot of logistical and technical problems to overcome to resolve this bug, but I don't see this particular point as especially problematic or difficult.
Everyone should be able to deactivate their account; there's no reason that being blocked should prevent that. (If anything, I'd expect blocked accounts to be a very legitimate and possibly large subset of people who'd want to go ahead and close out their accounts, if they have no desire to come back after whatever dispute or unbecoming activity they were mixed up in.)
(In reply to comment #0) > *** block posting to user's talk page? Although one could discourage it by hiding 'Add section' or perhaps even requiring a special user right [1], it should still be edit/move/deletable by sysops/stewards for administrative purposes and general wiki maintenance. - Krinkle [1] A bit like 'edituserjs' and 'editusercss', there'd be something like 'editdeactiveateduserpages'
We let people edit the user pages of users that don't even exist. I don't see a good reason to block unrelated users from being able to touch the user's talk page. This would just create an incentive for malicious users to register, shove spam on their talkpage, then deactivate their account so normal users can't blank the spam and mark the page for deletion.
(In reply to comment #10) > We let people edit the user pages of users that don't even exist. I don't see a > good reason to block unrelated users from being able to touch the user's talk > page. > This would just create an incentive for malicious users to register, shove spam > on their talkpage, then deactivate their account so normal users can't blank > the spam and mark the page for deletion. I think we can take off the tinfoil hat ;-) But I agree with the general sentiment that page editing/etc shouldn't be tied to this. That's what protection/deletion are for.
Actually, we technically don't allow editing the userpages of users that don't exist currently. This is the main problem with this, as it would defunct [[en:WP:CSD#U2|U2]] a lot. U2 is for userpages of '''non-existant users'''.
(In reply to comment #12) > Actually, we technically don't allow editing the userpages of users that don't > exist currently. This is the main problem with this, as it would defunct > [[en:WP:CSD#U2|U2]] a lot. U2 is for userpages of '''non-existant users'''. Except, we do allow it. I just created this userpage, on a User: that had the big red message saying the user didn't exist. https://www.mediawiki.org/wiki/User:ThisUserDoesNotExist WP social policy is irrelevant to this. We don't have a core restriction on the editing of userpages/usertalk for non-existent users. So we shouldn't have core code block users from editing a userpage/usertalk after the relevant user has deactivated their account.
I'm wondering how much of this could be piggybacked on top of the HideUser functionality that already exists in MediaWiki core. Fundamentally (or ideologically, rather), there needs to be a decision about whether MediaWiki will allow account deactivation, account deletion, or (self-)account obfuscation (which is essentially what HideUser is). Maybe an RFC is needed to gather input? I'm not sure.
This will become more necessary if the EU succeeds in its aims (see http://www.crikey.com.au/2012/02/21/eu-privacy-laws-the-right-to-be-forgotten-is-not-censorship/) to give individuals the ability to request information be deleted when an account is closed. Although an editors contributions generally are released under CC-BY-SA, the law may not view usernames and userpages in that light.