This message was deleted.

Hi @Maurice Brand-Freitag are you asking about OPAL or #C02RTML2WNN? OPA and OPAL have no concept of users or tenants. Still when triggering a data update you can override the value of an entire key. Also you can perform a PATCH operation, which does have the ability to mutate the existing value instead of just overriding it.

Hi, sorry, let me clarify. I'm talking about OPAL. The example is data in the format OPA uses to evaluate our policies, i.e.

data.tenants["tenantA"].users["userA"]

. When changes to policy relevant data happen we call the data update API on the OPAL server. This works fine when updating data incrementally, question is, if there is a way to remove data from OPA. Using PATCH would still leave the empty user within the data set.

All good :) I believe a PATCH call with a remove operation on

data/tenants/tenantA/users/userA

would produce the right outcome https://www.rfc-editor.org/rfc/rfc6902#section-4.2

Will do, thanks 👍

Thank you. I've added a comment on the issue as well. If you could do a PR, that would be great, I could review and approve it.