Comment 4 for bug 1173117

Revision history for this message
Steve Martinelli (stevemar) wrote :

Marking bug 1438915 as a dupe of this bug, but I wanted to also include the information here:

========
This bug was first discussed in the Recursive Deletion spec: https://review.openstack.org/#/c/148730/

Currently, when deleting a domain, all projects inside that domain are also deleted. When we have a hierarchy of projects this may cause inconsistencies since the operations are not atomic [1] (each level of the hierarchy is deleted in a separate transaction).

Two possible solutions to explore are:
1 - Use the concept of logical deletion
2 - As a first step list all project's id to be deleted and trigger one delete transaction with all ids

[1] https://github.com/openstack/keystone/blob/master/keystone/resource/core.py#L470-L498
========