We no longer maintain Keycloak 2.x in community. Please switch to the
latest Keycloak release. Alternatively, you can look at using Red Hat
Single Sign-On [1] which is our supported option.
[1]
https://access.redhat.com/products/red-hat-single-sign-on
On 10 May 2017 at 13:36, Teodor Haret <haret.spiru.teodor(a)gmail.com> wrote:
Hello !
First of all, congratulations on a nice product and keep up the good work !
We are using KC v2.5.5.Final and we encountered an issue with Evaluation
tool on RBAC, which seems to have been already fixed in latest version - I
tested on master branch. At a first look, the issue seems to have been
already fixed under KEYCLOAK-4652.
Our issue in few details is:
- if we evaluate against a user which was granted a given realm role
(ROLE1) directly, the result is 'Permit'; this is expected behavior.
- if we evaluate against another user which inherits the same realm role
(ROLE1) indirectly - due to belonging to a group, the evaluation result is
'Deny'.
I would need your advise on:
- supposing 'KEYCLOAK-4652' is the one that fixes also my issue, what would
the procedure to ask for this fix to be merged down to 2.5.5.Final as well
?
- generically speaking, is there any scenario where I should open a
separate issue on 2.5.5.Final ( eg. cases where fix from 'KEYCLOAK-4652' is
generic/complex and we want only a sub-part of it, etc) ?
Thank you,
Teo
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user