One feature request - Delete "self-created" payloads.

[vaadata-brzuszekm1]

In the version 4.3, a user role that can create new payloads was introduced. However I noticed that this role can't delete the new payloads he created himself.

Unless there is a specific issue I didn't think of, it might be a good addition to this new feature.

[ssl]

Hi @vaadata-brzuszekm1,

I understand and partly agree with your suggestion.

I'm just not sure yet on how to fully implement this. In ezXSS, it is actually not expected for a payload to be deleted. Even if the domain is no longer used, it is still expected to have reports in the archive.

If we add delete payload feature, do you agree that a payload can only be deleted if;

• The payload has 0 reports (either never received a report, or all of that payload got deleted)
• Be the creator (obvious)

If one did use a domain, it can sometimes takes months or years for a report to come in. Is this feature request also for these kind of payloads, or just for payloads that got created but didn't get used at all?

Thanks.

[vaadata-brzuszekm1]

Hi @ssl ,

My request is indeed for payloads that did get used.
I agree with the conditions you stated.