Can’t reuse username or email after deleting a user?

[dhanush-ninja]

Steps I did:

1. Deleted a user using:

   DELETE {{url}}:9002/users/{User id}
   

2. Tried to create a new user with the same username/email → request failed (username/email still reserved).

3. Also called the GET user API:

   GET {{url}}:9002/users/{Deleted User id}
   

   • Response still returns the user object.
   • Field "status": "deleted" is present.

4. Checked the user list in User Management page → the deleted user is not listed.

5. Opened the deleted user’s details page directly:

   localhost:3000/en/platform-management/users/{Deleted User id}
   

   • The deleted user’s details are still visible.
   • The status shows as unknown.
   • If I toggle enable/disable, the user gets re-activated and reappears in the list.

My Question:

• Is this the expected behavior (soft delete)?
• Should deleted users block reusing their username/email?
• If not, is there a way to completely remove a user (hard delete) so the username/email can be reused?

[dborovcanin]

Hello, @dhanush-ninja. At the moment, hard user removal is not implemented due to heavy coupling between different user and all the other entities. It's on our roadmap for the end of this year.

[dhanush-ninja]

Hello @dborovcanin ,
Thanks for clarifying! 👍

[dhanush-ninja]

I also noticed one more thing:

• When I delete a user, they are not being removed from the Roles Management → Members list.
• So even though the user is marked as deleted, they still appear in role memberships.
• Because of this, it’s difficult to identify the actual current members of a role.

Is this something planned to be handled along with hard delete, or should deleted users be excluded from role membership lists even during soft delete?