<div dir="ltr">[Forwarding to the list; not meant as a personal reply.]<br><div><div class="gmail_quote"><br><div dir="ltr"><div>Hello there,<br><br></div>This is exacly what I am struggling with at the moment. I have found a number of things which would need clarification in documentation as well as in examples:<br><ol><li><b>Custom user data properties/fields</b>. It seems that one has to/ought to add custom properties to three places in the theme files: account, admin and registration. However, the ways to add them differ greatly, as each FTL template structure is quite different. (Account uses account.ftl; Admin uses partials/user-attribute-entry.ftl). Pattern definitions and explanations are missing from examples and documentation, as far as I can tell. </li><li><b>Editable properties per role</b>. Realm admins/editors could perhaps be able to edit all properties (except primary key/ID value) for all the users in a realm - but we would typically like to restrict which properties (both basic and custom attributes) are editable depending on the roles/privileges a user has in the realm. (For example, it would likely be a bad ide to permit users to change their names and birthday arbitrarily after registration). How do we restrict editability of normaly and custom user properteis - both in terms of the data and the forms required to interact with keycloak? Pattern definitions and explanations are missing from examples and documentation, as far as I can tell.<br></li><li><b>Linking users to roles/privileges in other realms.</b> How should one construct realms to grant roles & privileges automatically to users in other realms? (For example: All Users in Literary Society A can register for a party hosted by Literary Society B. Hence, how does realm admin B grant role <span style="font-family:monospace,monospace">KnownGuest</span> to all users in realm A, to permit them to access Society B's register-to-the-event-page? Assume, of course, that both A and B are managed by the same Keycloak DB, so basic identity attributes should be extracted normally from Keycloak. Neither realm admins from A or B have master realm access.) Pattern definitions and explanations are missing from examples and documentation, as far as I can tell.</li></ol></div><div class="gmail_extra"><div><div class="h5"><br><div class="gmail_quote">2015-08-13 15:49 GMT+02:00 Stian Thorgersen <span dir="ltr"><<a href="mailto:stian@redhat.com" target="_blank">stian@redhat.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">As highlighted by the UXP team the registration screen is not very nice. I propose we remove the address fields from the registration and account management. Instead we should have an example theme that shows adding additional fields to the screens.<br>
_______________________________________________<br>
keycloak-dev mailing list<br>
<a href="mailto:keycloak-dev@lists.jboss.org" target="_blank">keycloak-dev@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-dev" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-dev</a><br>
</blockquote></div><br><br clear="all"><br></div></div>-- <br><div><span style="font-family:monospace;font-size:medium"><pre>--
+==============================+
| Bästa hälsningar,
| [sw. "Best regards"]
|
| Lennart Jörelid
| EAI Architect & Integrator
|
| jGuru Europe AB
| Mölnlycke - Kista
|
| Email: <a href="mailto:lj@jguru.se" target="_blank">lj@jguru.se</a>
| URL: <a href="http://www.jguru.se" target="_blank">www.jguru.se</a>
| Phone
| (skype): jgurueurope
| (intl): +46 708 507 603
| (domestic): 0708 - 507 603
+==============================+</pre></span></div>
</div>
</div><br><br clear="all"><br>-- <br><div class="gmail_signature"><span style="font-family:monospace;font-size:medium"><pre>--
+==============================+
| Bästa hälsningar,
| [sw. "Best regards"]
|
| Lennart Jörelid
| EAI Architect & Integrator
|
| jGuru Europe AB
| Mölnlycke - Kista
|
| Email: <a href="mailto:lj@jguru.se" target="_blank">lj@jguru.se</a>
| URL: <a href="http://www.jguru.se" target="_blank">www.jguru.se</a>
| Phone
| (skype): jgurueurope
| (intl): +46 708 507 603
| (domestic): 0708 - 507 603
+==============================+</pre></span></div>
</div></div>