[wp-trac] [WordPress Trac] #49668: Multisite: export/erase requests initiated in a sub-site should check whether the user belongs to that sub-site

WordPress Trac noreply at wordpress.org
Thu Mar 19 22:41:46 UTC 2020


#49668: Multisite: export/erase requests initiated in a sub-site should check
whether the user belongs to that sub-site
--------------------------+---------------------------------
 Reporter:  pbiron        |       Owner:  (none)
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  5.5
Component:  Privacy       |     Version:
 Severity:  normal        |  Resolution:
 Keywords:  has-patch     |     Focuses:  multisite, privacy
--------------------------+---------------------------------
Changes (by pbiron):

 * keywords:   => has-patch


Comment:

 [https://core.trac.wordpress.org/attachment/ticket/49668/49668.diff
 49668.diff] limits user privacy exports initiated from a multisite blog
 (including the main site) to users registered on that blog.

 A few notes:

 1. the `! is_network_admin()` check isn't needed as of right now, but I
 put it in there in anticipation of #43738, which is asking that
 export/erase requests be available at the network level
 2. we'll have to think about how to make it easy for custom exporters to
 also limit exports in a similar fashion (which might just have to be in
 documentation...haven't given it much thought yet)
 3. this is not yet ready to be committed, and should just be considered a
 POC at this point

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/49668#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list