[keycloak-user] Control which user profile attributes can be changed by the user

Jason Axley jaxley at expedia.com
Mon May 2 17:02:38 EDT 2016


I did not see any way to set a policy for which user profile attributes the user can change.  The account management UI displays all of the information in edit input boxes and presumably lets users change anything including name, email, etc.  What if I want to restrict which data users can change based on possibly their group or role?  Is that at all possible?

-Jason

Jason Axley
Sr. Security Engineer, Expedia Worldwide Engineering Team
425-679-4157 (o) | 206-484-2778 (m) | 206-55-AXLEY (gv)
333 108th Ave NE, 9S-282, Bellevue, WA 98004
EWE Security Wiki<https://confluence/display/POS/EWE+Security>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20160502/2ba6333f/attachment.html 


More information about the keycloak-user mailing list