Daan, I created the following PR, it don't allow users to delete themselves.

https://github.com/apache/cloudstack/pull/7242



------- Original Message -------
On Wednesday, February 15th, 2023 at 14:34, Sina Kashipazha 
<s.kashipa...@protonmail.com.INVALID> wrote:


> 

> 

> 

> 

> Yes, they shouldn't be allowed to delete themselves. I'm totally agree with 
> that.
> 

> We can add this extra step as well, before users remove something valuable 
> like volume or network, etc.
> 

> 

> ------- Original Message -------
> On Wednesday, February 15th, 2023 at 14:09, Daan Hoogland 
> daan.hoogl...@gmail.com wrote:
> 

> 

> 

> > again Sina, I think the users should never be allowed to delete themselves.
> > What is the use of such an action?
> 

> > On Wed, Feb 15, 2023 at 12:28 PM Sina Kashipazha
> > s.kashipa...@protonmail.com.invalid wrote:
> 

> > > I agree that it is not as pressing as it looks, but the consequences are
> > > high if users remove their account. In some setup, their VM will be 
> > > deleted
> > > immediately for ever.
> 

> > > Cause the network, VPS, account and many more deletion actions are look
> > > the same user will not read the confirmation pop up :-)
> 

> > > The proposed extra step that asks users to input the account name will
> > > prevent accident.
> 

> > > ------- Original Message -------
> > > On Wednesday, February 15th, 2023 at 10:17 AM, Wei ZHOU <
> > > ustcweiz...@gmail.com> wrote:
> 

> > > > Agree with Daan
> 

> > > > -Wei
> 

> > > > On Wednesday, 15 February 2023, Daan Hoogland daan.hoogl...@gmail.com
> 

> > > > wrote:
> 

> > > > > seems ok, but I do not see the use case as pressing. I´d rather say
> > > > > that a
> > > > > user should not be able to destroy their own account.
> 

> > > > > On Tue, Feb 14, 2023 at 3:32 PM Sina Kashipazha
> > > > > s.kashipa...@protonmail.com.invalid wrote:
> 

> > > > > > Hey guys,
> 

> > > > > > Cloudstack users can delete their account accidentally and lock
> > > > > > themselves
> > > > > > from accessing the CloudStack panel. A link to an account placed
> > > > > > next to
> > > > > > ISO, template, VM and other entities in CloudStack's UI. If 
> > > > > > customers
> > > > > > doesn't paying attention, they would click on the account link
> > > > > > instead of
> > > > > > the link to the entity they want (vm, template, ISO etc.) Then, if
> > > > > > they
> > > > > > had
> > > > > > wanted to delete that entity, they would press delete button without
> > > > > > realising they were on the account page, and press Confirm.
> 

> > > > > > I'm suggesting to add an extra step before deletion. In that step
> > > > > > users
> > > > > > must write the account name, unless otherwise they can't confirm
> > > > > > deletion.
> > > > > > Github, like many other applications asks you to write down the
> > > > > > entity's
> > > > > > name before DESTRUCTIVE and UNRECOVERABLE actions.
> 

> > > > > > I've also created the following issue in Github:
> > > > > > https://github.com/apache/cloudstack/issues/7219
> 

> > > > > > Please let me know your thoughts about the proposal.
> 

> > > > > > Kind regards,
> > > > > > Sina
> 

> > > > > --
> > > > > Daan
> 

> > --
> > Daan

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to