Hi, Do you have a link to your test program/reproducer ? And could you also open a ticket at https://issues.jboss.org/ browse/KEYCLOAK ? Seb On Tue, Jul 18, 2017 at 10:56 PM, Stephane Granger < stephane.granger(a)gmail.com&gt; wrote: > Hi, > > since upgrading to 3.2.0.Final, my client is not able to create clients in > a realm it just created. This was working before with 3.1.0.Final and > earlier versions as well. > > I wrote a small program to demonstrate the problem. > > Before running the program, you'll need to add the "testClient" to the > master realm, > Protocol: openid-connect > Access type: confidential > > You will need to modify the code to change the CLIENT_SECRET constant to > match your environment. You'll also need to change the keycloak.version > property in the pom.xml to match the version you're testing against. > > When running with 3.2.0.Final, we get the following: > 14:50:28,552 ERROR [org.jboss.resteasy.resteasy_jaxrs.i18n] (default > task-48) RESTEASY002005: Failed executing POST > /admin/realms/testRealm/clients: org.keycloak.services.ForbiddenException > at > org.keycloak.services.resources.admin.permissions.ClientPerm > issions.requireManage(ClientPermissions.java:248) > at > org.keycloak.services.resources.admin.ClientsResource. > createClient(ClientsResource.java:164) > > With 3.1.0.Final, the "testClient" is created successfully in the new > testRealm. > > Stephane > > _______________________________________________ > keycloak-user mailing list > keycloak-user(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/keycloak-user >

Thx and it's https://issues.jboss.org/browse/KEYCLOAK-5211 I believe ;) On Wed, Jul 19, 2017 at 4:25 PM, Stephane Granger < stephane.granger(a)gmail.com&gt; wrote: > https://issues.jboss.org/browse/KEYCLOAK-5015 > > On Wed, Jul 19, 2017 at 1:44 AM, Sebastien Blanc <sblanc(a)redhat.com&gt; > wrote: > >> Hi, >> >> Do you have a link to your test program/reproducer ? >> And could you also open a ticket at https://issues.jboss.org/brows >> e/KEYCLOAK ? >> >> Seb >> >> >> On Tue, Jul 18, 2017 at 10:56 PM, Stephane Granger < >> stephane.granger(a)gmail.com&gt; wrote: >> >>> Hi, >>> >>> since upgrading to 3.2.0.Final, my client is not able to create clients >>> in >>> a realm it just created. This was working before with 3.1.0.Final and >>> earlier versions as well. >>> >>> I wrote a small program to demonstrate the problem. >>> >>> Before running the program, you'll need to add the "testClient" to the >>> master realm, >>> Protocol: openid-connect >>> Access type: confidential >>> >>> You will need to modify the code to change the CLIENT_SECRET constant to >>> match your environment. You'll also need to change the keycloak.version >>> property in the pom.xml to match the version you're testing against. >>> >>> When running with 3.2.0.Final, we get the following: >>> 14:50:28,552 ERROR [org.jboss.resteasy.resteasy_jaxrs.i18n] (default >>> task-48) RESTEASY002005: Failed executing POST >>> /admin/realms/testRealm/clients: org.keycloak.services.Forbidde >>> nException >>> at >>> org.keycloak.services.resources.admin.permissions.ClientPerm >>> issions.requireManage(ClientPermissions.java:248) >>> at >>> org.keycloak.services.resources.admin.ClientsResource.create >>> Client(ClientsResource.java:164) >>> >>> With 3.1.0.Final, the "testClient" is created successfully in the new >>> testRealm. >>> >>> Stephane >>> >>> _______________________________________________ >>> keycloak-user mailing list >>> keycloak-user(a)lists.jboss.org >>> https://lists.jboss.org/mailman/listinfo/keycloak-user >>> >> >> >

Doh! You are right :). Bad cut & paste! 2017-07-19 14:44:54 +0000 Sebastien Blanc <sblanc(a)redhat.com&gt; : > Thx and it's https://issues.jboss.org/browse/KEYCLOAK-5211 I believe ;) > > On Wed, Jul 19, 2017 at 4:25 PM, Stephane Granger < > stephane.granger(a)gmail.com&gt; wrote: > >> https://issues.jboss.org/browse/KEYCLOAK-5015 >> >> On Wed, Jul 19, 2017 at 1:44 AM, Sebastien Blanc <sblanc(a)redhat.com&gt; >> wrote: >> >>> Hi, >>> >>> Do you have a link to your test program/reproducer ? >>> And could you also open a ticket at https://issues.jboss.org/brows >>> e/KEYCLOAK ? >>> >>> Seb >>> >>> >>> On Tue, Jul 18, 2017 at 10:56 PM, Stephane Granger < >>> stephane.granger(a)gmail.com&gt; wrote: >>> >>>> Hi, >>>> >>>> since upgrading to 3.2.0.Final, my client is not able to create clients >>>> in >>>> a realm it just created. This was working before with 3.1.0.Final and >>>> earlier versions as well. >>>> >>>> I wrote a small program to demonstrate the problem. >>>> >>>> Before running the program, you'll need to add the "testClient" to the >>>> master realm, >>>> Protocol: openid-connect >>>> Access type: confidential >>>> >>>> You will need to modify the code to change the CLIENT_SECRET constant to >>>> match your environment. You'll also need to change the keycloak.version >>>> property in the pom.xml to match the version you're testing against. >>>> >>>> When running with 3.2.0.Final, we get the following: >>>> 14:50:28,552 ERROR [org.jboss.resteasy.resteasy_jaxrs.i18n] (default >>>> task-48) RESTEASY002005: Failed executing POST >>>> /admin/realms/testRealm/clients: org.keycloak.services.Forbidde >>>> nException >>>> at >>>> org.keycloak.services.resources.admin.permissions.ClientPerm >>>> issions.requireManage(ClientPermissions.java:248) >>>> at >>>> org.keycloak.services.resources.admin.ClientsResource.create >>>> Client(ClientsResource.java:164) >>>> >>>> With 3.1.0.Final, the "testClient" is created successfully in the new >>>> testRealm. >>>> >>>> Stephane >>>> >>>> _______________________________________________ >>>> keycloak-user mailing list >>>> keycloak-user(a)lists.jboss.org >>>> https://lists.jboss.org/mailman/listinfo/keycloak-user >>>> >>> _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user