On 11/7/2013 10:21 AM, Bill Burke wrote:
I think you're going about the default roles thing wrong as far
as UI
goes. Since default roles really are only useful for newly registered
users they should be configured in one place under a "registration" menu
item in the "Realm" section of the Admin UI. The way it is now, you'd
have to go to possibly N different screens to configure roles applied to
a newly registered user.
So this "registration" config page would look pretty much like the role
mapping page in which you select roles you want applied when
registering. When we have composite roles this page should
automatically manage a "REGISTRATION" composite role behind the scenes.
Also, when we have composite roles...when registering, Keycloak will
examine the "REGISTRATION" composite role and assign each composite part
to the user.
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com