[wp-trac] [WordPress Trac] #44261: Export User Data includes media URLs, not the actual media files in zip file

[WordPress Trac]

#44261: Export User Data includes media URLs, not the actual media files in zip
file
------------------------------+------------------------------
 Reporter:  subrataemfluence  |      Owner:  (none)
     Type:  enhancement       |     Status:  new
 Priority:  normal            |  Milestone:  Awaiting Review
Component:  Privacy           |    Version:  trunk
 Severity:  normal            |   Keywords:  2nd-opinion gdpr
  Focuses:  privacy           |
------------------------------+------------------------------
 Use of media URLs rather than the media files in original in Exported User
 Data zip file is probably to keep the file small in size so that it could
 be transferred quickly.

 **But what if admin or any user with the same level of privilege can
 delete one of more media files of the user requesting a personal data
 export accidentally after the Export is initiated and is emailed /
 downloaded.
 **

 Do we already have a guard or option to deal with such a situation? Is
 this possible to include the physical media files in the zip or at least
 create a separate area where these files would be backed up and reference
 URLs point to this location?

 We can warn user (in the same email with the download link) to download
 the file say within next 72 hours otherwise the download link would
 expire. In the background after the stipulated time period the backup
 would be erased automatically. A new request needs to be initiated if this
 happens.

 This will make sure that the server space is not being overused for a
 longer period of time.

 How far you see the possibility of accidental deletion and user ends up
 with broken media link(s)? Do you think this could be a probable solution
 to avoid such a situation?

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/44261>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform