Skip to content

feat: redact PII fields before delete in user retirement flows#38426

Open
ktyagiapphelix2u wants to merge 32 commits into
openedx:masterfrom
ktyagiapphelix2u:ktyagi/primaryemail
Open

feat: redact PII fields before delete in user retirement flows#38426
ktyagiapphelix2u wants to merge 32 commits into
openedx:masterfrom
ktyagiapphelix2u:ktyagi/primaryemail

Conversation

@ktyagiapphelix2u
Copy link
Copy Markdown
Contributor

@ktyagiapphelix2u ktyagiapphelix2u commented Apr 23, 2026

Summary

Adds support for redacting sensitive PII fields before deletion in DeletableByUserValue models.

Changes include:

  • Added redact_before_delete_fields hook to model mixin
  • Redact emails before delete for:
    • CourseEnrollmentAllowed
    • PendingEmailChange
    • UnregisteredLearnerCohortAssignments
  • Added SQL assertion helpers to verify UPDATE occurs before DELETE
  • Added regression/unit tests for safe ID-filtered redaction and deletion flows
  • Updated email change flow to use delete_by_user_value

Ticket & Reference

https://2u-internal.atlassian.net/browse/BOMS-498

Related PR

https://2u-internal.atlassian.net/browse/BOMS-565
https://2u-internal.atlassian.net/browse/BOMS-564

Loading
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants