leonardo/yii2-usuario
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

re #224 add option to require consent

Browse Source
This commit is contained in:
tonydspaniard
2019-08-21 11:13:48 +02:00
parent 07a7a7bda7
commit 5b071dae88
37 changed files with 406 additions and 106 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/helpful-guides/gdpr.md
View File

@ -18,6 +18,8 @@ GDPR says: [Article 7](https://gdpr.algolia.com/gdpr-article-7)
All users must give consent of data processing to register.
Also consent will be stored in db with the user data.
If you have users before GDPR law you can force them to give consent via GDPRrequireConsentToAll. You must use also in your accessControl behaviors the yii2-usuario accessRuleFilter. Any registerd user that has not give consent will be redirected in any action to the consent screen except those defined in `GDPRconsentExcludedUrls`
#### Data portability
GDPR says: [Article 20](https://gdpr.algolia.com/gdpr-article-20)

12
docs/installation/configuration-options.md
View File

@ -42,6 +42,18 @@ Defaults to:
#### gdprAnonymizePrefix (type: `string`, default: `GDPR`)
Prefix to be used as a replacement when user requeste deletion of his data
#### gdprConsentMessage (type: `string`)
Use this to customize the message that will appear as hint in the give consent checkbox.
If you leave it empty the next message will be used:
>I agree processing of my personal data and the use of cookies to facilitate the operation of this site. For more information read our privacy policy
#### GdprRequireConsentToAll (type `boolean`, default `false`)
Whether require to already registered user give consent to process their data. According to GDPR this is mandatory.
To forbid user access to any function, until it gives consent, use the AccessRuleFilter included with this module.
#### GdprConsentExcludedUrls (type `array`, default `['user/settings/*']`)
List of urls that does not require explicit data processing consent to be accessed, like own profile, account... You can use wildcards like `route/to/*` .
#### enableRegistration (type: `boolean`, default: `true`)