WordPress.org

Make WordPress Core

Opened 4 weeks ago

Closed 3 weeks ago

Last modified 9 days ago

#43883 closed enhancement (fixed)

Add a user's attachments to the personal data export file

Reported by: allendav Owned by: allendav
Milestone: 4.9.6 Priority: normal
Severity: normal Version: trunk
Component: Privacy Keywords: gdpr needs-unit-tests has-patch commit fixed-major
Focuses: Cc:

Description

Attachments (e.g. media) can contain personal data (e.g. images of the person, EXIF Geo location, etc)

We should at least include a public link to each attachment a user has uploaded.

For smaller attachments (e.g. < 3 MB), maybe include them in the export archive too.

I'll take care of this after #43546 lands

Attachments (1)

43883.diff (4.0 KB) - added by allendav 4 weeks ago.
Add to the export report links to all the user's attachments

Download all attachments as: .zip

Change History (12)

This ticket was mentioned in Slack in #gdpr-compliance by allendav. View the logs.


4 weeks ago

#2 @allendav
4 weeks ago

Further note: We're doing this because we can't programatically handle all the possible ways attachments might contain personal data, so we're basically just going to treat any attachment as potentially containing personal data.

#3 @desrosj
4 weeks ago

  • Keywords needs-unit-tests added
  • Owner set to allendav
  • Status changed from new to assigned

@allendav
4 weeks ago

Add to the export report links to all the user's attachments

#4 @allendav
4 weeks ago

@desrosj @xkon - I stopped short of adding the smaller attachments to the ZIP file at this time. What do you think?

To test: Upload some media as a user you plan to run an export request against. Run the export request against them. Make sure URLs for each media item appear in the report.

#5 @allendav
4 weeks ago

  • Keywords has-patch needs-testing added; needs-patch removed

This ticket was mentioned in Slack in #gdpr-compliance by allendav. View the logs.


4 weeks ago

#7 @azaozz
3 weeks ago

In 43054:

Privacy: add attachments to the personal data export file.

Props allendav.
See #43883.

#8 @azaozz
3 weeks ago

  • Keywords commit fixed-major added; needs-testing removed
  • Milestone changed from Awaiting Review to 4.9.6

#9 @SergeyBiryukov
3 weeks ago

In 43108:

Privacy: add attachments to the personal data export file.

Props allendav.
Merges [43054] to the 4.9 branch.
See #43883.

#10 @SergeyBiryukov
3 weeks ago

  • Resolution set to fixed
  • Status changed from assigned to closed

#11 @desrosj
9 days ago

  • Component changed from General to Privacy

Moving to the new Privacy component.

Note: See TracTickets for help on using tickets.