[keycloak-user] Permission Handling After Keycloak 4.5.0

[Dmitry Telegin]

Hi Lasse,

In addition to what Cédric suggested, please also mind that beginning with 4.5, Keycloak Docker image uses standalone-ha.xml by default instead of standalone.xml, so if you made any changes there, you will need to update the -ha.xml file.

Cheers,
Dmitry Telegin

Carretti Consulting OÜ | Keycloak Consulting and Training
Sepapaja 6, Tallinn 15551, Estonia | info at carretti.pro

On Wed, 2019-07-03 at 17:27 +0000, Jahn, Lasse wrote:
> Hey everyone,
> 
> I'm running Keycloak Server Version 4.5.0.Final according to the dockerfile from jboss shown in the dockerhub [1] with only changed keycloak version. (Took the tools from [2])
> 
> During developing I noticed that there is an Endpoint missing that I wanted to use (request a group list which have specific client role, for users this enpoint exists
> 
> GET /{realm}/clients/{id}/roles/{role-name}/users
> 
> In Keycloak 6.0 this also exists for groups.
> GET /{realm}/clients/{id}/roles/{role-name}/groups
> 
> So I thought why not migrating to 6.0. After successful upgrade I realized that there is no permission tab?!
> I wanted to handle the permissions of a user to be a client admin as explained in the documentation [3] but this was not possible.
> 
> I thougth that maybe that the docker image does not include everything, so I downloaded all at the keycloak.org available server distributions and run them via standalone.sh (4.8, 5.0, 6.0) all with the same result, there is no permission Tab ?!
> 
> Is the documentation not updated and there is a way to enable the permission tab or how can I fullfill the mentioned scenario (client admin which is allowed to map roles) ?
> 
> 
> Regards
> Lasse
> 
> [1] https://hub.docker.com/r/jboss/keycloak/dockerfile
> [2] https://github.com/jboss-dockerfiles/keycloak/tree/4.5.0.Final/server
> [3] https://www.keycloak.org/docs/latest/server_admin/index.html#managing-one-specific-client
> 
> 
> 
> Viele Grüße
> Lasse Jahn
> 
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user