Delete user

DELETE 
/users/:id/

Anonymize a detached account — the only route to erasing PII.

Requires the account to already be organization-less (see remove_from_organization below): there is no direct path from "active member" to "gone", so the last-admin/self guards enforced at detach time are never bypassed here. get_queryset() also means a non-superuser org admin can never reach an org-less account in the first place — this is effectively staff-only in practice.

Every other FK to User (Project.user, TestRunSummary.user, AuditEvent.user, ...) is SET_NULL, so deleting the row outright would silently strip "who did this" from everything that person ever touched. Scrubbing the identifying fields in place instead keeps every one of those rows pointing at a stable, anonymized actor — history survives, only the PII doesn't.

Request

Responses

204

No response body