[wp-meta] [Making WordPress.org] #5618: Require ToS/Privacy at login and record acceptance

Making WordPress.org noreply at wordpress.org
Fri Feb 12 02:29:16 UTC 2021


#5618: Require ToS/Privacy at login and record acceptance
------------------------------------+--------------------
 Reporter:  tellyworth              |      Owner:  (none)
     Type:  enhancement             |     Status:  new
 Priority:  high                    |  Milestone:
Component:  Login & Authentication  |   Keywords:
------------------------------------+--------------------
 For legal reasons it is necessary that WordPress.org enforces acceptance
 of a ToS and Privacy Policy at login, and record the date and version of
 the policy most recently accepted by each user. This means:

 * The login form will need to include a checkbox such as `[ ] I have read
 and accept the terms of service and privacy policy` with appropriate
 links.
 * Failure to check the box will prevent login.
 * Login sessions should remain capped at 2 weeks to ensure all active
 users regularly accept new terms.
 * On successful login, a usermeta or similar value should be set recording
 the timestamp and version of the ToS and Privacy policy documents (perhaps
 the currently deployed svn rev# for each?)
 * It should probably also record the rev # of the login form and theme,
 since that may be relevant info.

-- 
Ticket URL: <https://meta.trac.wordpress.org/ticket/5618>
Making WordPress.org <https://meta.trac.wordpress.org/>
Making WordPress.org


More information about the wp-meta mailing list