Problem/Motivation

Login history isn't removed after permanently deleting user account(s). Possibly missing on the 8.x version but not confirmed. As data privacy laws and policies become stricter it's important to assume permanent deletion includes all identifying user information.

Proposed resolution

Implement hook_user_delete() to remove {login_history} table records for the deleted user account.

CommentFileSizeAuthor
#4 3254791-3.patch463 bytesbobooon
#3 3254791-2.patch463 bytesbobooon

Issue fork login_history-3254791

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

About issue forks

Comments

robphillips created an issue. See original summary.

robphillips opened merge request !3

bobooon’s picture

bobooon commented
Status: Active » Needs review
StatusFileSize
new 3254791-2.patch463 bytes
bobooon’s picture

bobooon commented
StatusFileSize
new 3254791-3.patch463 bytes
greggles’s picture

greggles
he/him
Primary language English
Location Denver, Colorado, USA
commented
Status: Needs review » Needs work

Thanks for your work on this so far, @robbiehobby.

The similar change for Drupal 10+ in #3367638: Delete Login history records after user delete was merged though it changed a bit. Would probably be good to add an update hook here similar to what was done in that issue so I'm moving this status to "Needs work."

Thanks!