'Delete user' feature

[damsleth]

• I have searched for existing issues to avoid creating duplicates

TLDR

I want to be able to delete a user from did

Description

With #544 , importing users is super easy.
Deleting users should also be possible in the UI.

This is a highly destructive action, something that should be reflected in the UI.

I suggest highlighting that this is a destructive action (red) in the user edit panel, as well as implementing a safety mechanism similar to Github's "delete repository" to prevent accidental deletion.

Mockup

Panel

Panel button:hover

Delete confirmation dialog

inspo

Releated issue

#548

[okms]

Do we have a way of disabling a user? E.g. we should disable but not delete tarald

[olemp]

Do we have a way of disabling a user? E.g. we should disable but not delete tarald

Nope, that's an issue! Post it 👍

[olemp]

Should this delete all time entried and confirmed periods for the user aswell? @okms @damsleth

[damsleth]

Should this delete all time entried and confirmed periods for the user aswell? @okms @damsleth

Yes. I was thinking it's the GDPR-compliant "delete my data" function.

[okms]

We have to check if we have to completely delete the users data or if we can anonymize

[damsleth]

Ties inn strongly with #754
from norskmakulering.no (relevant bits):

Merk deg at det ikke er all informasjon som skal slettes. Eksempelvis skal økonomiske opplysninger oppbevares i henhold til bokføringsloven og skattelovgivningen. Arkivloven, som først og fremst gjelder offentlige organ, men i tillegg enkelte private arkivbevarende institusjoner, legger også føringer for hva slags opplysninger som skal lagres.

I interpret this as we can get away with keeping non-anonymized time entries in the database for accounting purposes and still be GDPR compliant.
Also if that's the case - meaning we have to keep the data for accounting purposes, this feature only serves one purpose, which is to delete wrongly added A(A)D users from the users' list, e.g. [email protected]

[olemp]

Converting to discussion until we have the specification ready.

• Delete data? Anonymize data?
• Confirm delete? How?

cc @damsleth @okms