dharuanluigi/api.forum

api.forum

api.forum's Issues

Users endpoint - delete account

Normal users can delete just your own account.

Looking for the GPD(General Personal Data Protection Law), users when delete your own accounts, they can delete all of your own information all of them.

In some cases the username it will be substituted by random username, just for keep database integrity. All of that transactions shold be register in log table in db, just for track reports.

---

MODS can delete account of other users.

Username for users

It's look like more secure create a username for users, instead show to others their personal email information.

Needs implemented new field in entity.

Users endpoint - create accounts

For creating accounts, is necessary implemented a validation of email service. To avoid create massive users with random and non existent emails.

Users endpoint - update own data

Restrict update data for just it self information.

Normal users can update some information about itself. Just it, them doesn´t can be possible update data from another users.
This is restricts for moderators too, mods cannot be possible update information about noone users.

[ ] - Restrict update data user just for the data owners

Insert duplicated username

It doesnt be happen, username should be unique!

Add swagger

Added swagger support to make the api request more easy to understanding

Users endpoint - see data from the others

Normal and MODS users can see full of your own informations.

Them can see other users with simple views, like: username and their posts anwsers.

This feature just can be implemented before the issue #22 is closed.