Comment 3 for bug 532867

On Mon, Mar 15, 2010 at 4:23 PM, Tres Seaver <email address hidden> wrote:

> Is there consensus that Rossi's option #3 is the right track here?
>
> I have an inkling that preserving even an otherwise empty profile with
> the same ID as the deleted user be potentially too much information
> leakage, given that profile IDs are most often made from people's names
> or e-mails.
>
>
 That certainly needs to be a consideration. The technical problem becomes,
though, if the profile id changes, then all references to that id need to be
tracked down and changed, effectively turning it into option 2. The
references are *probably* confined to 'creator' and 'modified_by' attributes
of content objects, but there might be other references that aren't
springing to mind. It is certainly riskier from the standpoint of
maintaining referential integrity.

Given these trade offs, I'm not sure that this is a decision I can make
without a bit more discussion and input.