Question about account deletions

violinista28313

Hi there! I recently created a new test forum in the hopes of setting something up and I've been playing around with some of the permissions. Do users need to be given the same rank as the site owner to have the ability to remove forum accounts permanently? Is this a permission that can be gifted without giving the user the Administrator rank? I'd like to be able to gift that permission to both trusted moderators and the administrators, but I cannot seem to get it to work out correctly. Please let me know if I'm missing something crucial that would either a) fix this or b) address that they need to be given the same rank as the owner. I'm using the basic web hosting that comes with the forum and nothing extra.

clarkwinkelmann

violinista28313 the ability to delete any user is controlled by the user.delete permission, which I believe is actually missing from the admin panel. We should probably get this fixed at some point 😅 This means that when using the Flarum UI only, there's indeed only administrators who can perform that task. But the permission can be inserted manually in the database to give the permission to moderators, it just won't be shown in the admin panel.

I believe that permission is not protected against admin destruction, so a moderator with that permission would actually be able to delete all administrators from the website. That's probably one of the reason we never showed that permission in the admin panel.

Allowing the users to delete their own account is not possible with Flarum itself but could be added by a community extension. I know this was being discussed together with the other GDPR related features https://discuss.flarum.org/d/26387-gdpr-extension-needed