Add rake task to delete member accounts by anonymising their data

https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/what-is-personal-data/what-is-personal-data/#pd5

Author: despo

lib/tasks/delete_member.rake

@@ -0,0 +1,43 @@
+def usage_example
+  "Usage: rake member:delete'[[email protected]]'"
+end
+
+namespace :member do
+  desc 'Delete member account'
+  task :delete, [:email] => :environment do |_, args|
+    email = args[:email]
+
+    abort("You have to provide an email address. #{usage_example}") if email.blank?
+
+    member = Member.find_by!(email: email)
+
+    $stdout.puts "Deleting #{member.name} #{member.surname}'s account..."
+    $stdout.puts 'This action is irreversible.'
+    $stdout.puts 'Press any key to continue.'
+    $stdin.getch
+
+    ActiveRecord::Base.transaction do
+      MailingList.new(ENV['NEWSLETTER_ID']).unsubscribe(member.email)
+
+      member.auth_services.delete_all
+      member.subscriptions.delete_all
+
+      # generate new invitation tokens so the current email links stop working
+      member.workshop_invitations.each do |invitation|
+        invitation.send(:set_token)
+        invitation.save
+      end
+
+      member.email = "deleted_user_#{Time.zone.now.to_s(:number)}@codebar.io"
+      member.name = 'Deleted'
+      member.surname = 'User'
+      member.pronouns = nil
+      member.about_you = nil
+      member.twitter = nil
+      member.mobile = nil
+      member.save(validate: false)
+    end
+
+    Rails.logger.info 'Member account deleted.'
+  end
+end

spec/lib/tasks/delete_member_rake_spec.rb

@@ -0,0 +1,43 @@
+require 'spec_helper'
+
+RSpec.describe 'rake member:delete', type: :task do
+  let!(:member) { Fabricate.create(:member) }
+  before do
+    allow($stdout).to receive(:puts)
+  end
+
+  it "preloads the Rails environment" do
+    expect(task.prerequisites).to include "environment"
+  end
+
+  it 'when no email is provided' do
+    expect { task.invoke }.to raise_error(SystemExit, "You have to provide an email address. Usage: rake member:delete'[[email protected]]'")
+  end
+
+  it 'anonymises member information' do
+    invitations = Fabricate.times(4, :workshop_invitation, member: member)
+    tokens = invitations.map(&:token)
+
+    subscriptions = Fabricate.times(3, :subscription, member: member)
+
+    allow($stdin).to receive(:getch)
+
+    task.execute(email: member.email)
+
+    member.reload
+
+    expect(member.name).to eq('Deleted')
+    expect(member.surname).to eq('User')
+    expect(member.pronouns).to be_nil
+    expect(member.about_you).to be_nil
+    expect(member.twitter).to be_nil
+    expect(member.mobile).to be_nil
+
+    expect(member.subscriptions).to be_empty
+    expect(member.auth_services).to be_empty
+
+    invitations.each do |invitation|
+      expect(tokens).not_to include(invitation.reload.token)
+    end
+  end
+end