Shell.online Account Deletion Trail Management

说明与用途

Shell.online 通过匿名化审计日志、删除相关令牌并转移所有权，安全地删除账户，同时使用客户端加密保护数据。

问题

When a user deletes their account, the system must preserve a secure audit trail of commands typed by that user while ensuring sensitive data is removed and ownership is transferred appropriately.

结果

Audit logs remain intact but anonymized, ownership is safely transferred, and the system prevents accidental data leakage or account resurrection.

工作流

• 1. User navigates to account page and initiates deletion.
• 2. System prompts for typed email confirmation and requires recent sign‑in.
• 3. Server runs a single transaction that: a) removes memberships, login codes, CLI tokens, queued agent commands, sessions, vault key, comments, notifications; b) deletes or reassigns sessions; c) updates audit_events to set actor_email to "deleted account"; d) handles organization‑wide deletion if no other members remain; e) transfers ownership if applicable.
• 4. System records the deleted user ID for 2 hours to block resurrection.
• 5. Backup policy ensures data is purged from backups within 8 days.

证据

UPDATE audit_events SET actor_email = 'deleted account' WHERE actor_uid = $1

来源

An account half deleted is worse than either state: it can leave a team with no owner, or a session assigned to nobody.

来源