https://answers.axonivy.com/questions/3224/old-userrole-mapping-still-remain-after-renaming-role<p>Hi ivyteam</p> <p>In my project, i have the role name <code>Front RM</code> and i assign some users for it. Then some version later i rename that role to <code>FrontRM</code> (remove space). That mean all users will be mapped to <code>FrontRM</code></p> <p>Now i use <code>ivy.session.getSessionUser().getRoles()</code> but it always say that user has two roles <code>Front RM</code> and <code>FrontRM</code>.</p> <p>I've investigated then see that there still remain old mapping between user and old role. That's mean when i rename a role, ivy actually add a new role with new name and keep old one with mapping. I explained in this picture: <img alt="alt text" src="https://answers.axonivy.com/upfiles/Untitled_ksSIFXV.png"></p> <p>Some questions:</p> <ol> <li>Why ivy still keep old role + old mapping? it's because of multiple PMVs? But in case there is only one PMVs so could ivy remove unnecessary role completely?</li> <li>Does api <code>ivy.session.getSessionUser().getRoles()</code> return correct roles as it display on Admin Tool? If not can i base on any flag to remove that <code>inactive</code> role?</li> </ol> <p>Thanks</p>enMon, 23 Apr 2018 03:44:34 -0400https://answers.axonivy.com/questions/3224/old-userrole-mapping-still-remain-after-renaming-role/3232<p>Hello <a href="https://answers.axonivy.com/users/118/trungdv"><a href="https://answers.axonivy.com/users/118/trungdv">@trungdv</a></a></p> <p>If you only change the <em>Display Name</em> of the role, then you would not have any problems. In your case I assume that you manually modified the <em>roles.roleconfig</em> file?</p> <p>1) Because you manually changed the identifier of the role. Ivy does not know the "old" role - it can not be properly merged with your new role. You can manually delete this role via API <code>ch.ivyteam.ivy.security.IRole.delete()</code> -&gt; assigned task to this role are unassigned afterwards.</p> <p>2) <code>ivy.session.getSessionUser().getRoles()</code> returns all roles. In the admin ui you only see the active roles as default. You can change that if you click on <em>Display obsolete Roles</em> at the bottom. You only can figure out if a role is active via the API <code>ch.ivyteam.ivy.security.ISecurityContext.getActiveRoles()</code>.</p>Alex SuterMon, 23 Apr 2018 03:44:34 -0400https://answers.axonivy.com/questions/3224/old-userrole-mapping-still-remain-after-renaming-role/3232