We're updating the issue view to help you get more done.Learn more

Add a config.json setting to disable the permanent APIv4 delete team parameter

Add a config.json setting to disable the permanent APIv4 delete team parameter.

The setting should be off by default, so that an admin must enable it if they want to allow team admins permanently delete data. The setting is enabled by default for GitLab Omnibus so we don't break their existing CLI script.

Status

Mana

2

Assignee

Joram Wilander

Reporter

Jason Blais

Epic Link

Fix versions

Mattermost Team

Extensibility

Sprint

None

QA Assignee

Lindy Isherwood

QA Test Steps

1. Set `ServiceSettings.EnableAPITeamDeletion` to true and restart the server or reload the config from system console. 2. As a system administrator, use Postman or curl to send a DELETE request to the end point "http://some-mattermost-url.com/api/v4/teams/{teamid}?permanent=true". Should get a 200 OK back. 3. Check the database Teams table to make sure the team is actually deleted 4. Set `ServiceSettings.EnableAPITeamDeletion` to false and restart the server or reload the config from system console. 5. Make the same request as above but for a different team, should be a 200 again 6. Check the database table again and that team should be still there with DeleteAt set

QA Testing Areas

API