GDPR: I can create a new account with the same email as a deleted account

Description

ISSUE
I create an account under an email and delete the account. I can then create a new account with the email associated with the deleted account.

REPRODUCTION STEPS
I activated the account deletion UI in my devstack:
1. Enable "course_experience.gdpr" waffle flag.
2. Run ./manage.py lms --settings=devstack_docker populate_retirement_states

I register an account with the email address "aroux+test@edx.org". I delete the account with the new UI. I register a new account with the same email, "aroux+test@edx.org".

Note that:

  • After creating the new "aroux+test@edx.org" account, I can't delete the account. The deletion code finds and reports a duplicate user for that email.

  • I have not run any deletion-related jenkins jobs or scripts.

Steps to Reproduce

None

Current Behavior

None

Expected Behavior

None

Reason for Variance

None

Release Notes

None

User Impact Summary

None

Status

Assignee

Troy Sankey

Reporter

Alessandro Roux

Reach

None

Impact

None

Customer

None

Partner Manager

None

URL

None

Contributor Name

None

Groups with Read-Only Access

None

Actual Points

None

Category of Work

None

Stakeholders

None

Sprint

None

Priority

Unset
Configure