We'd like to have a consistent and safe way for study designers (almost always the implementers, so people with the DEVELOPER role) to delete and remove things as they set up a study. Often are deletes really remove things from the database and are only accessible to administrators for test clean-up. Here's how we'll support both through our rest API:=
class Apple
boolean deleted - this flag should be part of the public API of the object.
GET /apples?includeDeleted=boolean
...
- sets deleted = false and that's it. This is an option for both developers and administrators
DELETE /applies/id?physical=true or DELETE /apples?id=x&physical=true
- physically removes item from database if and only if the caller is an administrator (otherwise falls back to a logical delete)