False alarm!
i finally managed to make it work. Behaviour is normal. I was probably
missing sth.
On Wed, Aug 26, 2015 at 9:01 AM, Orestis Tsakiridis <
orestis.tsakiridis(a)telestax.com> wrote:
Hello,
Is there any example/documentation on using application roles and the
"use-resource-role-mappings" property? It seems that they are ignored at
the JEE level (meaning the roles have no effect when i apply restriction
through web.xml).
I've been trying to test application roles on the database-service
example. I added "use-resource-role-mappings" property and enabled
DirectAccessGrant to manually get a token. I also assigned the
database-service:'user' role to bburke user and removed the realm-level
'user' role.When trying to access the /customers (as bburke) i keep getting
a 403.
Btw, i've checked the token and it looks perfectly normal. 'user' role is
there as an application level role.
Thanks