Implement the feature by following the same mechanism used for both removed users and groups: the delay in days since the removal of a space or of a component instance after which this space or application is definitively deleted is specified into the org/silverpeas/admin/admin.properties configurartion file. Two delays and two CRONs can be set: one for the removed spaces and another one for the removed applications.
The pb is the query part of the URI of HTTP GET requests isn't taken when checking for attempt to perform a CRUD operation on a resource in Silverpeas. Now all parts of the query is checked. Ensure also to avoid regexp flooding.
Guest users cannot access profiles of others users.
Fix minor bugs in directory. Fix null user id in the Ckeditor plugin identitycard.
Remove the login and specific identifier from the user data sent by the User Profile web service.
Refactor the way the search on users and groups are performed in Administration. Uses for doing a visitor pattern so that any additional treatments on the search criteria can be done easier.