C#•3y ago

✅ Mask data when solft delete is applied

Hi, is there any nuget package or EF Core feature which I can configure to mask data in database when I apply solft delete?

When user request delete his data in database, due to the GDPR regulative I need to leave user data in database because of statistics data, but mask user sensitive data like first name, last name, e-mail, gender...

Do you know any nuget for this or have idea how I can do this? I know I can manually do this to update every property I need.
I suppose if nuget exists it should had custom attribute to mark data for mask after soft delete.

Angius•9/8/23, 7:39 PM

Global query filters?

Angius•9/8/23, 7:39 PM

That will allow you to apply, say, .Where(thing => thing.DeltedAt != null).Where(thing => thing.DeltedAt != null) to every query

Pobiega•9/8/23, 7:42 PM

Thats a good step in the right direction (and there is a way to bypass the global filter for when you calculate statistics), but you'll still need to manually mask the records.

Pobiega•9/8/23, 7:43 PM

But thats easy enough, instead of calling context.Remove(item);context.Remove(item); just fetch the item and call .Mask().Mask() on it, which can both do the masking and flag it as soft-deleted

Angius•9/8/23, 7:43 PM

Ah, masking as in replacing emails with garbage data and what not, gotcha

Pobiega•9/8/23, 7:43 PM

yes

TJackenOP•9/8/23, 8:03 PM

I know for global filter, as @Pobiega said I need some method which would mask data in database from name Lucas it need to rename it to AnonymousUser (for every user who will get IsDeleted flag).

Pobiega•9/8/23, 8:04 PM

Apply a ICanBeMaskedICanBeMasked interface to all entities that need it, and have a Mask();Mask(); method in it

Pobiega•9/8/23, 8:05 PM

you cant just apply a library and it'lll work automatically, as only you know what your entities look like and what info must be masked

Angius•9/8/23, 8:10 PM

I mean, technically, a library could be looking for some [ShouldBeMasked][ShouldBeMasked] attribute and use reflections or codegen

Pobiega•9/8/23, 8:11 PM

Sure, but thats more or less the same amount of work as writing your own masking method

TJackenOP•9/8/23, 8:11 PM

Agree with you, I got idea create custom attribute MaskAttribute(string mask = "AnonymousUser") would apply this attribute over properties in User entity class. Override method for delete (custom method) and if soft delete is applied with reflection populate mask on right place and update data in database.

Pobiega•9/8/23, 8:11 PM

Sourcegen seems like a good choice if you want an attribute thou

deprecatio•9/8/23, 9:25 PM

i believe abp does it (if you inherit for his audit class), but if you just need that probably you would be better off doing it yourself i think

Accord•9/9/23, 9:51 PM

Was this issue resolved? If so, run

/close

/close

otherwise I will mark this as stale and this post will be archived until there is new activity.

✅ Mask data when solft delete is applied

Similar Threads

Similar Threads

Similar Threads