#694 User control over data

[Mark Grimshaw]

Various options (to comply better with GDPR etc.).

Currently , the admin can delete a user with various options to preserve data such as resource metadata.

Other ideas, taken from Règles de pérennité des comptes LinuxFr.org et données à caractère personnel

1. Establish the list of personal data retained (necessary for GDPR): for us id, password, email, Full name,
2. User can download all their data
3. User can delete their data if it is not essential to the service
4. User can delete their account (sometimes deactivate to allow recovery within a grace period)
5. Automatic or manual deactivation of accounts unused for more than Y years to prevent hacking (recoverable)
6. Automatic or manual deletion of accounts deactivated for more than Y years