GDPR: if we end up with type "consent", what to do with added_by, modified_by etc?
The *_by
-fields on a plan are linked directly to a person. If that person deletes his user, unless we change things, any plan with that user in a *_by
-field will be deleted. This might be fine for unpublished plans, but not quite so for doi-ed, published plans and certainly not for plans with more than one editor.
The easiest fix to preserve plans is to set the *_by
-fields to empty. We could also remove all *_by
-fields and use a logging-mechanism instead. But you're not supposed to ever change a log.