[wp-trac] [WordPress Trac] #39000: REST API: Require the reassign parameter when deleting users

[WordPress Trac]

#39000: REST API: Require the reassign parameter when deleting users
--------------------------+------------------------------------------
 Reporter:  jeremyfelt    |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  4.7
Component:  Users         |    Version:  trunk
 Severity:  normal        |   Keywords:  needs-patch needs-unit-tests
  Focuses:  rest-api      |
--------------------------+------------------------------------------
 In both single site and multisite, when deleting a user through the
 WordPress admin, a specific decision is presented - whether to assign all
 of the user's posts to another user, or to delete all of the posts.

 Via discussion in Slack and in #38962, which disables the `DELETE` method
 for the user endpoint in multisite, we need to require `reassign` as a
 parameter so that content isn't accidentally lost.

 Because any `int`, especially `0` and above, is a valid value for
 reassigning `post_author`, we also need change `reassign` so that it
 allows for `null` as an indication that a deleted user's posts should also
 be deleted.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/39000>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform