Basically, I imported the "photoz" realm from that quickstart and removed
everything except the scopes and policies. Then I followed your steps to
reproduce the issue.
On Wed, Jan 16, 2019 at 9:38 AM Pedro Igor Silva <psilva(a)redhat.com> wrote:
Here it is.
On Wed, Jan 16, 2019 at 9:30 AM Marek Lindner <mareklindner(a)neomailbox.ch>
wrote:
> Hi Pedro,
>
> > Which version of Keycloak are you using?
>
> I am using 4.8.2 Final (see attached screenshot).
>
>
> > I tried to reproduce the problem using upstream and the evaluation tool
> > looks correct by reporting only album:view. The same goes if obtaining
> an
> > RPT from the token endpoint.
>
> Can you share a screenshot of your evaluation tool result ? Does it
> correctly
> DENY access ?
>
> I can also share my server config json if this helps.
>
> Thanks,
> Marek
>
>