Shared role on wipe command

[rlouapre]

On ml wipe command, I believe Roxy does not check if a role defined in ml-config.xml has been assigned to a user not managed by Roxy script.

• Am I correct?
• Would it make sense to keep the role in that scenario?

[dmcassel]

That's correct; Roxy does not check whether someone's done stuff to what it controls by means other than the config.

[grtjn]

Wouldn't it make more sense to have the role detached from those extra users (or roles maybe?) before deleting it?

Or is it really a role being reused among different projects? Maybe a general feature to exclude things from wipe would be useful. Could be applied to everything..

skip-wipe-dbs=content-db
skip-wipe-users=nobody
etc.

[grtjn]

I think this ticket is outdated. ML 7+ sec:remove-role seems to already take care of this. The external user remains, but the role disappears from the list of inherited roles. Doesn't even show up in xdmp:user-roles.