So all permissions must pass when evaluating a resource/scope
authorization? Just did some testing in admin console. I have 2
permissions. I used the policy evaluator for a resource/scope combo.
One permission passes, the other fails. Evaluator result is DENY:
Result
*DENY*
Scopes
No scopes available.
Policies
# *map.role.permission.realm-management.manage-authorization
<
http://localhost:8180/auth/admin/master/console/#/realms/test/clients/b13...
was*PERMIT*by*UNANIMOUS*decision.
* *role.policy.realm-managementmanage-users
<
http://localhost:8180/auth/admin/master/console/#/realms/test/clients/b13...
to*PERMIT*.
* *role.policy.realm-managementmanage-authorization
<
http://localhost:8180/auth/admin/master/console/#/realms/test/clients/b13...
to*PERMIT*.
# *role-mapper-permission
<
http://localhost:8180/auth/admin/master/console/#/realms/test/clients/b13...
was*DENY*by*UNANIMOUS*decision.
* *role-mapper
<
http://localhost:8180/auth/admin/master/console/#/realms/test/clients/b13...
to*DENY*.