Deleting nested device roles in bulk via REST API results in duplicate change records #11415

New Issue

adam · 2025-12-29T21:44:57+01:00

adam commented

2025-12-29 21:44:57 +01:00

Originally created by @jeremystretch on GitHub (Jul 25, 2025).

Originally assigned to: @jeremystretch on GitHub.

Deployment Type

Self-hosted

NetBox Version

v4.3.4

Python Version

3.10

Steps to Reproduce

Create device role A with no parent.
Create device role B as a child of role B.
Note the IDs of both roles. (In this example, we assume their IDs are 1 and 2.)
Delete both roles using a single REST API request:

curl -X DELETE \
-H "Authorization: Token $TOKEN" \
-H "Content-Type: application/json" \
-H "Accept: application/json; indent=4" \
http://netbox:8000/api/dcim/device-roles/ \
--data '[
    {"id": 1},
    {"id": 2}
]'

Inspect the change log.

Expected Behavior

The API request should generate only two deletion records (one for either role).

Observed Behavior

A duplicate deletion record is generated for the child role.

I believe the first comes from the cascading deletion triggered by the deletion of the parent role; the second comes from the explicit deletion in the API request.

Originally created by @jeremystretch on GitHub (Jul 25, 2025). Originally assigned to: @jeremystretch on GitHub. ### Deployment Type Self-hosted ### NetBox Version v4.3.4 ### Python Version 3.10 ### Steps to Reproduce 1. Create device role A with no parent. 2. Create device role B as a child of role B. 3. Note the IDs of both roles. (In this example, we assume their IDs are 1 and 2.) 4. Delete both roles using a single REST API request: ```python curl -X DELETE \ -H "Authorization: Token $TOKEN" \ -H "Content-Type: application/json" \ -H "Accept: application/json; indent=4" \ http://netbox:8000/api/dcim/device-roles/ \ --data '[ {"id": 1}, {"id": 2} ]' ``` 5. Inspect the change log. ### Expected Behavior The API request should generate only two deletion records (one for either role). ### Observed Behavior A duplicate deletion record is generated for the child role. <img width="894" height="154" alt="Image" src="https://github.com/user-attachments/assets/308a3e31-0caf-4643-a4c5-10818a88290d" /> I believe the first comes from the cascading deletion triggered by the deletion of the parent role; the second comes from the explicit deletion in the API request.

adam added the type: bug status: accepted severity: low labels 2025-12-29 21:44:58 +01:00

adam closed this issue

2025-12-29 21:44:58 +01:00

adam commented

2025-12-29 21:44:58 +01:00

@jeremystretch commented on GitHub (Jul 25, 2025):

I believe this occurs for any similar nested objects, such as inventory items.

@jeremystretch commented on GitHub (Jul 25, 2025): I believe this occurs for any similar nested objects, such as inventory items.

Sign in to join this conversation.

Branches Tags

main

update-changelog-comments-docs

feature-removal-issue-type

20911-dropdown

20239-plugin-menu-classes-mutable-state

21097-graphql-id-lookups

feature

fix_module_substitution

20923-dcim-templates

20044-elevation-stuck-lightmode

feature-ip-prefix-link

v4.5-beta1-release

20068-import-moduletype-attrs

20766-fix-german-translation-code-literals

20378-del-script

7604-filter-modifiers-v3

circuit-swap

12318-case-insensitive-uniqueness

20637-improve-device-q-filter

20660-script-load

19724-graphql

20614-update-ruff

14884-script

02496-max-page

19720-macaddress-interface-generic-relation

19408-circuit-terminations-export-templates

20203-openapi-check

fix-19669-api-image-download

7604-filter-modifiers

19275-fixes-interface-bulk-edit

fix-17794-get_field_value_return_list

11507-show-aggregate-and-rir-on-api

9583-add_column_specific_search_field_to_tables

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/netbox#11415