Add setting to enable/disable users

config.yml.sample

@@ -43,6 +43,10 @@ service:
   # If enabled, vikunja will send an email to everyone who is either assigned to a task or created it when a task reminder
   # is due.
   enableemailreminders: true
+  # If true, will allow users to request the complete deletion of their account. When using external authentication methods 
+  # it may be required to coordinate with them in order to delete the account. This setting will not affect the cli commands
+  # for user deletion.
+  enableuserdeletion: true
 
 database:
   # Database type to use. Supported types are mysql, postgres and sqlite.

pkg/config/config.go

@@ -56,6 +56,7 @@ const (
 	ServiceSentryDsn             Key = `service.sentrydsn`
 	ServiceTestingtoken          Key = `service.testingtoken`
 	ServiceEnableEmailReminders  Key = `service.enableemailreminders`
+	ServiceEnableUserDeletion    Key = `service.enableuserdeletion`
 
 	AuthLocalEnabled      Key = `auth.local.enabled`
 	AuthOpenIDEnabled     Key = `auth.openid.enabled`
@@ -246,6 +247,7 @@ func InitDefaultConfig() {
 	ServiceEnableTaskComments.setDefault(true)
 	ServiceEnableTotp.setDefault(true)
 	ServiceEnableEmailReminders.setDefault(true)
+	ServiceEnableUserDeletion.setDefault(true)
 
 	// Auth
 	AuthLocalEnabled.setDefault(true)

pkg/routes/routes.go

@@ -313,8 +313,10 @@ func registerAPIRoutes(a *echo.Group) {
 	}
 
 	// User deletion
-	u.POST("/deletion/request", apiv1.UserRequestDeletion)
-	u.POST("/deletion/confirm", apiv1.UserConfirmDeletion)
+	if config.ServiceEnableUserDeletion.GetBool() {
+		u.POST("/deletion/request", apiv1.UserRequestDeletion)
+		u.POST("/deletion/confirm", apiv1.UserConfirmDeletion)
+	}
 
 	listHandler := &handler.WebHandler{
 		EmptyStruct: func() handler.CObject {