-
Notifications
You must be signed in to change notification settings - Fork 16
Explain Privacy Request Execution [#1397] #1396
Conversation
@conceptualshark, @ethyca/docs-authors Sean asked me to take a stab at a first draft of how Privacy Request Execution works, for the guides, separate from how we configure Fidesops. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks so much for drafting this out. 👍 I ran through and cleaned up some of the formatting, and clarified a few things. Let me know if that works!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
thanks for your improvements @conceptualshark!
6. Email Erasure Requests Step | ||
7. Policy Post-Execution Webhooks Step | ||
8. Follow-up Email Notification Step | ||
Manual webhooks allow data pertaining to be manually uploaded by a fidesops admin. If manual webhooks are enabled, request execution will exit with a status of `requires_input` until a submission has been received for each manual webhook configured. The privacy request can then be resumed, and request execution will continue from this step. See [Manual Webhooks](manual_webhooks.md) for more information on configuration options and resuming a `requires_input` request. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Missed words, maybe "Manual webhooks allow data pertaining to a subject"
Fidesops admins should separately upload data for each webhook, or a blank response if no data is found. The privacy | ||
request can then be resumed, and request execution will continue from this step. See [Manual Webhooks](manual_webhooks.md) for more information | ||
on configuring manual webhooks and resuming a `requires_input` request. | ||
Fidesops sends a request to each pre-execution webhook with a [policy webhooks request format](policy_webhooks.md#policy-webhook-request-format), which your endpoints should be prepared to unpack. If you need more time to carry out an action, your webhook can instruct Fidesops to `halt`, which will cause execution to exit with a status of `paused`. Request execution can be continued when ready using a token supplied in the original request. | ||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lowercase "Fidesops to halt
"?
reach a Collection, it will exit early with a status of `error`. To remedy, you will have to | ||
how your Collections are related to each other in your Datasets and resubmit the privacy request. | ||
Fidesops builds a Directed Acyclic Graph, or DAG, where each location or node corresponds to a Collection in one of your Datasets. The graph helps determine the order in which nodes will be visited. Fidesops begins with any Collections that can be queried using the supplied identity data, and then points those Collections toward dependent Collections, etc. If fidesops can't determine out how to reach a Collection, it will exit early with a status of `error`. To remedy an errored access request, you update how your Collections are related to each other in your Datasets, and resubmit the privacy request. | ||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Just checking, is determine out how to reach
intentional or would it be determine how to reach
🙏 Thank you for the proofread! Should be all set. |
Purpose
We have guides talking about how to configure Fidesops but we're missing a high-level explanation of how Privacy Request Execution works.
Changes
Fidesops Privacy Request Execution
page to the docsChecklist
CHANGELOG.md
fileCHANGELOG.md
file is being appended toUnreleased
section in an appropriate category. Add a new category from the list at the top of the file if the needed one isn't already there.Run Unsafe PR Checks
label has been applied, and checks have passed, if this PR touches any external servicesTicket
Fixes #1397