There is a feature which enables one to request a copy of an Item which is access-restricted. These requests are stored in the database until they are resolved. The database record is never deleted, and in fact the DAO has no method for doing so.
Was this a conscious decision, to retain requests forever? Should requests be deletable? should they be deleted mechanically? when?
It should be noted that copy request records necessarily contain personally identifying information, and thus retention policy may need review with respect to laws regarding such information.