1.1 KiB
1.1 KiB
AssetManager 0.5.5.38
Security and privacy phase 2
- makes the security and privacy documentation readable for all authenticated users
- restricts changes, retention checks and deletion runs to administrators
- protects built-in privacy categories from removal while custom categories remain removable
- adds retention dry runs and manually confirmed deletion actions for job payloads and diagnostic logs
- records checks and deletion runs in a separate privacy deletion audit log without copying deleted personal content
- keeps automatic deletion disabled
- fixes the HTML report browser title to "Record of Processing Activities / Retention Concept"
Implemented manual retention handlers
- Job scripts, output, callback payloads and diagnostics: clears payload and diagnostic fields of completed jobs older than the configured retention period while retaining job metadata.
- Application, LDAP and diagnostic logs: deletes old log files and truncates active log files older than the configured retention period. Privacy policy and deletion audit logs are excluded.