[wp-trac] [WordPress Trac] #49668: Multisite: export/erase requests initiated in a sub-site should check whether the user belongs to that sub-site

[WordPress Trac]

#49668: Multisite: export/erase requests initiated in a sub-site should check
whether the user belongs to that sub-site
--------------------------------+--------------------
 Reporter:  pbiron              |      Owner:  (none)
     Type:  defect (bug)        |     Status:  new
 Priority:  normal              |  Milestone:  5.5
Component:  Privacy             |    Version:
 Severity:  normal              |   Keywords:
  Focuses:  multisite, privacy  |
--------------------------------+--------------------
 As of 5.4, when an export request is initiated from within a specific sub-
 site in a multisite,  `wp_user_personal_data_exporter()` will export user
 data for a user even if that user is not registered on that sub-site.

 `wp_user_personal_data_exporter()` should be modified to check that the
 user is registered on the sub-site where the request was initiated.

 Note: `wp_media_personal_data_exporter()` and
 `wp_comment_personal_data_exporter()` do not need to be modified as the
 tables they query are specific to the sub-site, whereas the user table is
 global.

 Related: #44176

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/49668>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform