<div dir="ltr">Hi Marek,<div>thank you very much for the answer. I have been created the issue KEYCLOAK-1735.</div><div><br></div><div>Best regards</div><div>--Vito</div></div><div class="gmail_extra"><br><div class="gmail_quote">2015-08-05 10:59 GMT+02:00 Marek Posolda <span dir="ltr"><<a href="mailto:mposolda@redhat.com" target="_blank">mposolda@redhat.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"><span class="">
<div>On 4.8.2015 18:00, Vito Vessia wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Hi all,
<div>I'm trying to use KC for a suite of multitenant webapps.
Each tenant/customer has a separated realm and I use a custom
Federation Provider to map users and roles to my company's
legacy custom ACL database. Customers also want to
manage/create users by their own, but I don't want they manage
other realm stuff like Federation Provider parameters, client
apps, etc, so I have to provide to some users of each realm
the only roles of "manage-user"/"view-users" from the app
realm-management, so they can only view the Manage User option
in the realm Console.</div>
<div>The problem is that through the console they may promote
themselves assigning to existing users or to new users the
role of "manage-realm" and after a simple refresh they can
manage the entire realm.</div>
<div>Is there a way to avoid this or am I wrong to do this?</div>
</div>
</blockquote></span>
Looks like not. Feel free to create JIRA for this.<span class=""><br>
<blockquote type="cite">
<div dir="ltr">
<div>One more question connected to this one: is there a way to
localize also the realm console? If my customers have to
manage their own users, they would read labels and messages in
their own languages.</div>
<div>Thank you very much for your time and for your great and
versatile product.</div>
</div>
</blockquote></span>
AFAIK Stan is looking at admin console localization. Maybe it will
be in 1.5 release.<br>
<br>
Marek<br>
<blockquote type="cite">
<div dir="ltr">
<div><br>
</div>
<div>Best regards</div>
<div>--Vito</div>
</div>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
keycloak-user mailing list
<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a></pre>
</blockquote>
<br>
</div>
</blockquote></div><br></div>