The poll modules saves hostnames/ ip address of anonymous votes. From a privacy point of view there should be a configuration option to not save ip adresses of these anonymous votes (or to throw them away after a resonable time period).

Issue fork poll-744752

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

Support from Acquia helps fund testing for Drupal Acquia logo

Comments

amateescu’s picture

Version: 7.x-dev » 8.x-dev
Status: Active » Postponed (maintainer needs more info)

How would you allow anonymous voting without storing their hostname/ip?

alexpott’s picture

Project: Drupal core » Poll
Version: 8.x-dev » 8.x-1.x-dev
Component: poll.module » Code

Poll is no longer part of core

dakala’s picture

Issue summary: View changes

Not sure this is an issue. How else would we be able to allow and keep track of anonymous votes? There's the option of not allowing anonymous votes at all. Proposing that this be closed.

dakala’s picture

Status: Postponed (maintainer needs more info) » Needs review
Berdir’s picture

Status: Needs review » Active

Lets keep it open if someone wants to work on it. But yes, I don't see how we'd support anonymous votes then.

BramDriesen’s picture

Title: optional not storing hostnames » Option to not store IP addresses
Version: 8.x-1.x-dev » 2.0.x-dev
FileSize
24.53 KB
82.59 KB

An alternative could be to hash this data in the database? It could be a general setting that applies to all polls on the site.

However, I don't think storing IP addresses is a privacy concern as they don't really tell something about the user.

For example the webform module is also storing IP addresses with each submission. It does have a setting to disable this (on general level for all, or per webform setting).

IP Setting

They are doing unique checks in a different way as us. They check on UID or a cookie value.

Unique submissions setting

Berdir’s picture

Which is essentially what the anonymous voting issue does, it adds ip/session/nothing as options, so once that is done, then this could be implemented on top of that if an option other than hostname is selected.

samit.310@gmail.com’s picture

Assigned: Unassigned » samit.310@gmail.com
Status: Active » Needs work
BramDriesen’s picture

Aah yes, totally forgot about that one when going through the backlog :) linking it together helps!