Hi, since upgrading to 3.2.0.Final, my client is not able to create clients in a realm it just created. This was working before with 3.1.0.Final and earlier versions as well. I wrote a small program to demonstrate the problem. Before running the program, you'll need to add the "testClient" to the master realm, Protocol: openid-connect Access type: confidential You will need to modify the code to change the CLIENT_SECRET constant to match your environment. You'll also need to change the keycloak.version property in the pom.xml to match the version you're testing against. When running with 3.2.0.Final, we get the following: 14:50:28,552 ERROR [org.jboss.resteasy.resteasy_jaxrs.i18n] (default task-48) RESTEASY002005: Failed executing POST /admin/realms/testRealm/clients: org.keycloak.services.ForbiddenException at org.keycloak.services.resources.admin.permissions.ClientPermissions. requireManage(ClientPermissions.java:248) at org.keycloak.services.resources.admin.ClientsResource.createClient( ClientsResource.java:164) With 3.1.0.Final, the "testClient" is created successfully in the new testRealm. Stephane _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user

https://issues.jboss.org/browse/KEYCLOAK-5015 On Wed, Jul 19, 2017 at 1:44 AM, Sebastien Blanc <sblanc(a)redhat.com&gt; wrote: > Hi, > > Do you have a link to your test program/reproducer ? > And could you also open a ticket at https://issues.jboss.org/brows > e/KEYCLOAK ? > > Seb > > > On Tue, Jul 18, 2017 at 10:56 PM, Stephane Granger < > stephane.granger(a)gmail.com&gt; wrote: > >> Hi, >> >> since upgrading to 3.2.0.Final, my client is not able to create clients >> in >> a realm it just created. This was working before with 3.1.0.Final and >> earlier versions as well. >> >> I wrote a small program to demonstrate the problem. >> >> Before running the program, you'll need to add the "testClient" to the >> master realm, >> Protocol: openid-connect >> Access type: confidential >> >> You will need to modify the code to change the CLIENT_SECRET constant to >> match your environment. You'll also need to change the keycloak.version >> property in the pom.xml to match the version you're testing against. >> >> When running with 3.2.0.Final, we get the following: >> 14:50:28,552 ERROR [org.jboss.resteasy.resteasy_jaxrs.i18n] (default >> task-48) RESTEASY002005: Failed executing POST >> /admin/realms/testRealm/clients: org.keycloak.services.Forbidde >> nException >> at >> org.keycloak.services.resources.admin.permissions.ClientPerm >> issions.requireManage(ClientPermissions.java:248) >> at >> org.keycloak.services.resources.admin.ClientsResource.create >> Client(ClientsResource.java:164) >> >> With 3.1.0.Final, the "testClient" is created successfully in the new >> testRealm. >> >> Stephane >> >> _______________________________________________ >> keycloak-user mailing list >> keycloak-user(a)lists.jboss.org >> https://lists.jboss.org/mailman/listinfo/keycloak-user >> > >

Doh! You are right :). Bad cut & paste! 2017-07-19 14:44:54 +0000 Sebastien Blanc <sblanc(a)redhat.com&gt; : > Thx and it's https://issues.jboss.org/browse/KEYCLOAK-5211 I believe ;) > > On Wed, Jul 19, 2017 at 4:25 PM, Stephane Granger < > stephane.granger(a)gmail.com&gt; wrote: > >> https://issues.jboss.org/browse/KEYCLOAK-5015 >> >> On Wed, Jul 19, 2017 at 1:44 AM, Sebastien Blanc <sblanc(a)redhat.com&gt; >> wrote: >> >>> Hi, >>> >>> Do you have a link to your test program/reproducer ? >>> And could you also open a ticket at https://issues.jboss.org/brows >>> e/KEYCLOAK ? >>> >>> Seb >>> >>> >>> On Tue, Jul 18, 2017 at 10:56 PM, Stephane Granger < >>> stephane.granger(a)gmail.com&gt; wrote: >>> >>>> Hi, >>>> >>>> since upgrading to 3.2.0.Final, my client is not able to create clients >>>> in >>>> a realm it just created. This was working before with 3.1.0.Final and >>>> earlier versions as well. >>>> >>>> I wrote a small program to demonstrate the problem. >>>> >>>> Before running the program, you'll need to add the "testClient" to the >>>> master realm, >>>> Protocol: openid-connect >>>> Access type: confidential >>>> >>>> You will need to modify the code to change the CLIENT_SECRET constant to >>>> match your environment. You'll also need to change the keycloak.version >>>> property in the pom.xml to match the version you're testing against. >>>> >>>> When running with 3.2.0.Final, we get the following: >>>> 14:50:28,552 ERROR [org.jboss.resteasy.resteasy_jaxrs.i18n] (default >>>> task-48) RESTEASY002005: Failed executing POST >>>> /admin/realms/testRealm/clients: org.keycloak.services.Forbidde >>>> nException >>>> at >>>> org.keycloak.services.resources.admin.permissions.ClientPerm >>>> issions.requireManage(ClientPermissions.java:248) >>>> at >>>> org.keycloak.services.resources.admin.ClientsResource.create >>>> Client(ClientsResource.java:164) >>>> >>>> With 3.1.0.Final, the "testClient" is created successfully in the new >>>> testRealm. >>>> >>>> Stephane >>>> >>>> _______________________________________________ >>>> keycloak-user mailing list >>>> keycloak-user(a)lists.jboss.org >>>> https://lists.jboss.org/mailman/listinfo/keycloak-user >>>> >>> _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user