[keycloak-user] Policy Evaluation Tool - "No scopes available"

[Hübner, Bettina]

No, I think that’s enough information. Also showing the scopes that were denied is a good enhancement.

Thanks
Bettina



Von: Pedro Igor Silva [mailto:psilva at redhat.com]
Gesendet: Dienstag, 23. Mai 2017 22:21
An: Hübner, Bettina
Cc: keycloak-user at lists.jboss.org
Betreff: Re: [keycloak-user] Policy Evaluation Tool - "No scopes available"

Bettina, I have this now fixed in upstream. Do you have any other information you would like to see from evaluation results ?

I have enhanced the result page to show the scopes that were granted/denied if the permission evaluated was a scope permission.

Regards.
Pedro Igor

On Tue, May 23, 2017 at 1:13 PM, Pedro Igor Silva <psilva at redhat.com<mailto:psilva at redhat.com>> wrote:
Hey Bettina, I also noticed this and it is a bug. Will fix it.

On Tue, May 23, 2017 at 10:15 AM, Hübner, Bettina <Bettina.Huebner at kvbawue.de<mailto:Bettina.Huebner at kvbawue.de>> wrote:
Hi,

It seems the representation of the evaluation result has been changed in version 3.1.0.Final (Policy evaluation tool, admin console) (compared to 2.5.0.Final and also 3.0.0.Final).

Before, it showed <Resource Name> with scopes [list of all scopes of the resource] and the details for the resource listed all allowed scopes.

Now, in version 3.1.0.Final, it shows <Resource Name> with scopes [apparently allowed scopes] and the details for the resource always show “no scopes available” as scopes, even if the user has the permission for some or all scopes of the resource (tooltip still shows “The list of allowed scopes.”).

I find this new representation a little bit confusing. At least I would expect that “scopes” lists the allowed scopes for a resource as it was before.

Kind regards
Bettina


_______________________________________________
keycloak-user mailing list
keycloak-user at lists.jboss.org<mailto:keycloak-user at lists.jboss.org>
https://lists.jboss.org/mailman/listinfo/keycloak-user