Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

GDPR #3431

Closed
wants to merge 29 commits into from
Closed

GDPR #3431

wants to merge 29 commits into from

Conversation

Naugrimm
Copy link

@Naugrimm Naugrimm commented Jan 25, 2019

This pull request adds a "privacy" tab to the settings page where you can

  • set the privacy statement
  • set the imprint
  • remove unverified subscribers

The privacy statement and imprint links will be displayed on every page in the footer area as well as the footer in all email notifications. (only if the respective setting is not empty) (#3054)

Additionally all subscribers need to accept the privacy statement before being subscribed. (only if the privacy statement is not empty)

All Notification emails now contain an List-Unsubscribe header (#3102)

Copy link

@accesslint accesslint bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There are accessibility issues in these changes.


<div class="tab-content">
<div role="tabpanel" class="tab-pane active" :id="name">
<textarea class="form-control" :name="name" rows="5" v-model="valueModel"></textarea>
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks like there's a label missing for this input. That makes it hard for people using screen readers or voice control to use the input. If you don't want a visual label, try an aria-label attribute.

the acceptPrivacyStatement parameter is now required in the api endpoint POST /subscribers
@jbrooksuk jbrooksuk self-assigned this Jan 26, 2019
@jbrooksuk jbrooksuk added this to the V2.4.0 milestone Jan 26, 2019
Copy link
Member

@jbrooksuk jbrooksuk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is great work! Thank you so much for taking this on.

There are just a few things that need addressing:

  • Not having a privacy statement should not prevent people to signup. Countries outside of the EU whose customers (whether that's internal or external) don't need to follow GDPR. Also, if Cachet is used internally, then a privacy statement would not be needed.
  • The footers in the status page and emails should only link to the Imprint or Privacy Statement if there is one.
  • Can we add the Markdown icon to the textareas as we have done for others?
  • Please remove the .gitignore changes.
  • Please don't install the Laravel IDE Helper.
  • What about HTTP support in URLs?

.gitignore Outdated Show resolved Hide resolved
app/Bus/Commands/Subscriber/SubscribeSubscriberCommand.php Outdated Show resolved Hide resolved
app/Bus/Handlers/Events/MessageSending.php Outdated Show resolved Hide resolved
app/Http/Controllers/StatusPageController.php Outdated Show resolved Hide resolved
app/Http/Controllers/StatusPageController.php Show resolved Hide resolved
resources/assets/js/app.js Outdated Show resolved Hide resolved
resources/views/vendor/mail/html/message.blade.php Outdated Show resolved Hide resolved
resources/views/partials/footer.blade.php Show resolved Hide resolved
Copy link

@accesslint accesslint bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There are accessibility issues in these changes.

<div class="tab-content">
<div role="tabpanel" class="tab-pane active" :id="name">
<div class="markdown-control">
<textarea class="form-control" :name="name" rows="5" v-model="valueModel" :aria-label="label"></textarea>
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks like there's a label missing for this input. That makes it hard for people using screen readers or voice control to use the input. If you don't want a visual label, try an aria-label attribute.

@jbrooksuk
Copy link
Member

By the way don't worry about StyleCI issues, that'll fix automatically once we merge.

Can you remove the compiled assets please. They create way too many conflicts :)

Copy link

@accesslint accesslint bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There are accessibility issues in these changes.

resources/views/dashboard/settings/privacy.blade.php Outdated Show resolved Hide resolved
resources/views/dashboard/settings/privacy.blade.php Outdated Show resolved Hide resolved
@gcommit
Copy link

gcommit commented Jan 22, 2020

Hi, when will this be added? Companies can be punished to penalties of several thousands of € if a user can't apply to the GDPR !!!!! This is highly important!!!

@anthosz
Copy link

anthosz commented Jan 22, 2020

@gcommit Do not hesitate to contribute to make things happen. 😇

@gcommit
Copy link

gcommit commented Jan 22, 2020

I will see what i can do. but this is an issue which is urgent because of the laws in europe. It‘s not some small feature request. And this pull request is stuck for a whole year now...

@Naugrimm
Copy link
Author

Well this leads to nowhere... I'm closing this pull request and will open another one with the changes rebased on the current 2.4 branch

@Naugrimm Naugrimm closed this Jan 26, 2020
@Naugrimm Naugrimm deleted the feature/gdpr-2.4 branch January 26, 2020 09:57
@Naugrimm Naugrimm mentioned this pull request Jan 26, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants