Granularity of roles in account endpoint
- First Post
- Replies
- Stats
-
Go to
- ----- 2024 -----
- April
- March
- February
- January
- ----- 2023 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2022 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2015 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2014 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2013 -----
- December
- November
- October
- September
- August
- July
In the commit 0ce10a3249db69592cb7fee70cefd4a2eec66423, three new AccountRoles were
added:
view-applications
view-consent
manage-consent
Do we need/want such fine grain access control? Or should we stick with just using
manage-account and view-profile?
Regards
Doug
We want them and there's no big problem supporting them as we already have
the code to require one of a list of roles, for example get profile is
permitted for view-profile or manage-account.
On Tue, 19 Nov 2019 at 23:37, Douglas Palmer <dpalmer(a)redhat.com> wrote:
In the commit 0ce10a3249db69592cb7fee70cefd4a2eec66423, three new
AccountRoles were added:
view-applications
view-consent
manage-consent
Do we need/want such fine grain access control? Or should we stick with
just using manage-account and view-profile?
Regards
Doug
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
1618
days inactive
1619
days old
1 comments
2 participants
tags (0)
participants (2)
-
Douglas Palmer -
Stian Thorgersen