<div dir="ltr">Thanks for your fast response<br><br>I've another question please is there any third-party application may help me in this case (provide ACL CRUD) , and can be easily integrated with KeyCloak ?</div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Mar 2, 2016 at 2:10 PM, Stian Thorgersen <span dir="ltr"><<a href="mailto:sthorger@redhat.com" target="_blank">sthorger@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">If you have a limited number of screens then it can a good idea to create roles for these, and you can just create these a client roles using the admin console or admin endpoints. You can use a delimiter in the role name to specify the screen (for example 'screen-a/read'. However, if you have a large number of screens then the roles approach will quickly become unmanageable and you may be better of using an ACL or something in your application itself.<div><br></div><div>What you are asking for is more often implemented as ACLs rather than RBAC. RBAC is usually used for things like 'manager' has read/write access to a group of resources, rather than 'user-a' has read access to 'resource-a'.</div></div><div class="gmail_extra"><br><div class="gmail_quote"><div><div class="h5">On 2 March 2016 at 11:26, Yasser El-ata <span dir="ltr"><<a href="mailto:yelata@blulogix.com" target="_blank">yelata@blulogix.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5"><div dir="ltr"><p style="margin:0px;padding:0px;color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;line-height:20px">Hello , i wan't to create CRUD using KeyCloak , i have an angularJS application and it's use KeyCloak</p><p style="margin:10px 0px 0px;padding:0px;color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;line-height:20px">My case is : i have screens in my application that contain sub screens and every sub screen contain CRUD roles (CREATE , READ , UPDATE , DELETE) , it's may contain multi levels</p><p style="margin:10px 0px 0px;padding:0px;color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;line-height:20px">the screenshot may make the case more clear</p><p style="margin:10px 0px 0px;padding:0px;color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;line-height:20px">the normal client roles is not enough for me or maybe i miss understand some thing</p><p style="margin:10px 0px 0px;padding:0px;color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;line-height:20px">could you please help me how to create these roles in KeyCloak , or if KeyCloak is support roles like this or if there is any other way to create them ?</p><p style="margin:10px 0px 0px;padding:0px;color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;line-height:20px">Thanks</p><span><font color="#888888"><div><br></div>-- <br><div><div dir="ltr"><span style="font-family:arial,helvetica,sans-serif;color:black;font-size:10pt">Yasser El-Ata</span><br><span style="font-family:arial,helvetica,sans-serif;color:rgb(0,84,147);font-size:10pt">Java Developer</span><br><span style="color:rgb(0,84,147);font-family:arial,helvetica,sans-serif;font-size:12.8px">BluLogix</span><br><span style="font-family:arial,helvetica,sans-serif;color:black;font-size:7.5pt">737 Walker Rd Ste 3, Great Falls, VA 22066</span><br><span style="font-family:arial,helvetica,sans-serif;color:black;font-size:7.5pt">t: <a href="tel:443.333.4100" value="+14433334100" target="_blank">443.333.4100</a> | f: <a href="tel:443.333.4101" value="+14433334101" target="_blank">443.333.4101</a></span><br><u style="font-family:arial,helvetica,sans-serif;font-size:12.8px"><span style="font-size:7.5pt;color:rgb(0,84,147)"><a href="http://www.blueoss.com/" style="color:rgb(17,85,204)" target="_blank"><span style="color:blue">www.blulogix.com</span></a></span></u><br><div><div><div><div><p><span style="font-size:7pt;color:rgb(85,142,213)"><font face="arial, helvetica, sans-serif">The information transmitted is intended only for the person(s) to whom it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer.</font></span></p></div></div></div></div></div></div>
</font></span></div>
<br></div></div>_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br></blockquote></div><br></div>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><span style="font-family:arial,helvetica,sans-serif;color:black;font-size:10pt">Yasser El-Ata</span><br><span style="font-family:arial,helvetica,sans-serif;color:rgb(0,84,147);font-size:10pt">Java Developer</span><br><span style="color:rgb(0,84,147);font-family:arial,helvetica,sans-serif;font-size:12.8000001907349px">BluLogix</span><br><span style="font-family:arial,helvetica,sans-serif;color:black;font-size:7.5pt">737 Walker Rd Ste 3, Great Falls, VA 22066</span><br><span style="font-family:arial,helvetica,sans-serif;color:black;font-size:7.5pt">t: 443.333.4100 | f: 443.333.4101</span><br><u style="font-family:arial,helvetica,sans-serif;font-size:12.8000001907349px"><span style="font-size:7.5pt;color:rgb(0,84,147)"><a href="http://www.blueoss.com/" style="color:rgb(17,85,204)" target="_blank"><span style="color:blue">www.blulogix.com</span></a></span></u><br><div><div><div><div><p><span style="font-size:7pt;color:rgb(85,142,213)"><font face="arial, helvetica, sans-serif">The information transmitted is intended only for the person(s) to whom it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer.</font></span></p></div></div></div></div></div></div>
</div>