Comment 14 for bug 1718747

Adam - deleting all the users and groups was the original behavior: http://git.openstack.org/cgit/openstack/keystone/tree/keystone/identity/core.py#n491

The fact that it doesn't do that any more and emits a 500 error is a regression caused by the addition of a foreign key in the user table.

We require the domain to be disabled before deleting to prevent footgunning.

We could "fix" the behavior to issue a 4XX instead of exploding but this would not be in line with the current intended behavior.