feat(search): add governed DSAR coverage
This commit is contained in:
@@ -55,3 +55,17 @@ Files, Campaign, Calendar, Mail, IDM, and Postbox provide native source
|
||||
adapters. Mail indexes only its bounded read-only cache, and Postbox never
|
||||
indexes ciphertext or key material. All six recheck current source-owned
|
||||
authorization when results are returned.
|
||||
|
||||
## Data-subject requests
|
||||
|
||||
Search publishes `privacy.dsar.search` for derived index documents, queued
|
||||
changes, and minimized ACL projections. Exact Search or source-module
|
||||
references locate derived copies without exporting indexed text, URLs,
|
||||
metadata, token values, hashes, cursors, queued payloads, or errors. Account,
|
||||
identity, and membership matches describe access projections only and do not
|
||||
establish ownership of source content.
|
||||
|
||||
Derived documents and queued changes can be purged idempotently. ACL-only
|
||||
matches require review at the source authority. The authoritative module must
|
||||
be corrected or erased before a rebuild; otherwise its provider may republish
|
||||
the derived Search row.
|
||||
|
||||
Reference in New Issue
Block a user