Add personal data from usermeta/userdata to personal data export

[allendav]

Add personal data from usermeta/userdata to the personal data export using the infrastructure added in #43438.

See also #43440

[TZ Media]

Exporter for user and user_meta

[TZ Media]

43440.patch​ adds a data exporter for user and user_meta, based on the code for the comments exporter.

It currently does not export the hashed password, and any data related to roles and capabilities. Should these be added, too?

[desrosj]

I refreshed the patch to apply correctly. While I was at it, I also included the following updates:

• Added missing space at the beginning and/or end of the add_filter() call and control structures.
• Added @since tags to inline documentation for added functions.
• Aligned the $data_to_export array at the =>.
• Associative arrays should have each item on its own line when there are more than one.
• Add missing = sign in the elseif ($user->data->user_status = '1' ) condition. Also, converted the user_status conditionals to be Yoda conditions to follow the coding standards. (Should these use strict comparisons as well?)

Questions:

• Email is passed through strtolower(). I think might cause issues with mixed case emails.
• wp_user_personal_data_exporter() has a second parameter, $page. For the comments export (the original source of this code), this seems to represent the page of results. If this is needed for the user data export, there should be a description added to that paremter's @param tag. Side note: I think the description for the comment $page parameter could be confusing. Comment page. could be interpreted as a few different things: the page post that the comments belong to, page of the data results, etc..
• I removed the password related items. I don't think that needs to be included. It is something that is a secret to you. But I could be wrong.
• The $done variable at the end of wp_user_personal_data_exporter() is not tied into any logic. If $page needs to be utilized, then this needs to be tied into that like in comments.
• The comments export checks that the email address is not empty and returns early if it is. Should this do the same for consistency? An early return could also be added if the get_user_by() result is empty.

I would also like to see some tests for this. I can come back and write some if I am not beaten to it.

[desrosj]

Also, I just noticed that there is no default for the switch(). As it stands now, I don't think any user meta would display that is not whitelisted in the switch(). Not sure if this is intentional or not, but should this be more flexible?

[TZ Media]

• refreshed patch to correctly apply with current trunk.
• removed $page as it is not needed fur user export.
• simplified done return parameter to 'done' => true.
• early return when no user is found for email address.
  • Will the implementation cause problems processing the export?

The mentioned early return if email is empty is on the comments remover, not on the exporter. Should this be added to the exporters as well?

Have not written any tests. @desrosj I would be glad if you could review my changes and do the unit tests for this. Haven's written tests before for core.

[TZ Media]

Replying to desrosj:

Also, I just noticed that there is no default for the switch(). As it stands now, I don't think any user meta would display that is not whitelisted in the switch(). Not sure if this is intentional or not, but should this be more flexible?

Same reasoning here as with user exporter. If some theme or plugin adds user meta data, it is responsible for exporting these into the post.

[desrosj]

In 43547.patch​:

• Fixed inconsistency with tab vs space indentation.
• Moved filter hook registration with the other privacy hooks.
• Added missing break; on the final switch conditional.
• Added unit tests.

Also, I checked the comments exporter, and that one was returning an empty array when a nothing was found, so that should also be enough for users.

@TZ Media That makes sense about other user meta.

[azaozz]

Hmm, why do we export "user_status"? We don't export the comment status, right? Imho 0 or 1 is not "personal data" by a long shot :)

[allendav]

Replying to azaozz:

Hmm, why do we export "user_status"? We don't export the comment status, right? Imho 0 or 1 is not "personal data" by a long shot :)

I agree - it doesn't seem like personal data - i cannot use it to identify a person. Let's not export that piece of meta.

[azaozz]

In 43055:

Privacy: add user information to the personal data export file.

Props TZ-Media, desrosj.
See #43547.

[azaozz]

This seems to work well, ready for merging :)

[pento]

[43055] is causing unit test failures on Travis, and locally.

1) Tests_User::test_wp_user_personal_data_exporter
Failed asserting that 11 is identical to 12.

/srv/www/wordpress-develop/public_html/tests/phpunit/tests/user.php:1619

[SergeyBiryukov]

In 43116:

Privacy: Correct unit test for wp_user_personal_data_exporter() added in [43055].

user_status is not considered personal data, so the total number of exported user properties is 11.

See #43547.

[SergeyBiryukov]

In 43117:

Privacy: add user information to the personal data export file.

Props TZ-Media, desrosj.
Merges [43055] and [43116] to the 4.9 branch.
See #43547.

[desrosj]

Moving to the new Privacy component.