[keycloak-user] Control which user profile attributes can be changed by the user

[Jason Axley]

https://issues.jboss.org/browse/KEYCLOAK-2963

From: Stian Thorgersen <sthorger at redhat.com<mailto:sthorger at redhat.com>>
Reply-To: "stian at redhat.com<mailto:stian at redhat.com>" <stian at redhat.com<mailto:stian at redhat.com>>
Date: Monday, May 2, 2016 at 11:01 PM
To: Jason Axley <jaxley at expedia.com<mailto:jaxley at expedia.com>>
Cc: "keycloak-user at lists.jboss.org<mailto:keycloak-user at lists.jboss.org>" <keycloak-user at lists.jboss.org<mailto:keycloak-user at lists.jboss.org>>
Subject: Re: [keycloak-user] Control which user profile attributes can be changed by the user

Afraid this is not possible at the moment, feel free to create a JIRA

On 2 May 2016 at 23:02, Jason Axley <jaxley at expedia.com<mailto:jaxley at expedia.com>> wrote:
I did not see any way to set a policy for which user profile attributes the user can change.  The account management UI displays all of the information in edit input boxes and presumably lets users change anything including name, email, etc.  What if I want to restrict which data users can change based on possibly their group or role?  Is that at all possible?

-Jason

Jason Axley
Sr. Security Engineer, Expedia Worldwide Engineering Team
425-679-4157<tel:425-679-4157> (o) | 206-484-2778<tel:206-484-2778> (m) | 206-55-AXLEY (gv)
333 108th Ave NE, 9S-282, Bellevue, WA 98004
EWE Security Wiki<https://confluence/display/POS/EWE+Security>

_______________________________________________
keycloak-user mailing list
keycloak-user at lists.jboss.org<mailto:keycloak-user at lists.jboss.org>
https://lists.jboss.org/mailman/listinfo/keycloak-user

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20160503/edc65d9b/attachment.html