This feels grim, but I feel like we need to have some sort of policy in place for what to do when a person who has a Drupal.org user account has died.

I feel like it should include:
- Disable contact form
- Disable Git access
- *Not* block the account

Maybe this is better to discuss in the Community Working Group?

Comments

Dave Reid’s picture

mlhess’s picture

dddave’s picture

I remember a policy issue already existing...

tvn’s picture

As I mentioned in the g.d.o post, a few weeks ago we added a line to the Terms of Service, outlining a process for this type of situation.

Disabling contact form and git access seems fine. I agree about not blocking user account, since that'll make it inaccessible. I think additional steps to 'lock' user account and prevent possibility of someone breaking into it could be: change password to a random string and replace primary email address with a non existing one.

Homotechsual’s picture

I also am not convinced that one of the earlier points made in the thread about assigning content to the anonymous user is appropriate.

Community members make Drupal and whilst assigning content from someone who chooses to delete their account to the anonymous user is both sensible and appropriate in this instance I'm glad to see that the alternative of retaining and blocking the user accounts seems to have concensus as appropriate and necessary.

lizzjoy’s picture

Status: Active » Closed (fixed)

The ToS states under the Cancellation section:
If you are a relative or a friend of a deceased user, contact help@drupal.org and we will take steps to lock their user account and protect the privacy and data of the deceased person. Verification may be required.
I'm going to close this issue since that is now live. If more discussion is needed, please open the issue again. Thank you all for having this conversation.

Dave Reid’s picture

Ok so, if we get a request in the webmasters queue, direct them to help@drupal.org instead!