Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Add Groups resource type and scopes to authorization schema and evaluation implementation #35562

New issue
New issue
Closed
task
#37038
Closed
Add Groups resource type and scopes to authorization schema and evaluation implementation#35562
task
#37038
Assignees
pedroigorvramik
Labels
area/admin/fine-grained-permissionsrelease/26.2.0team/core-iam
@vramik

Description

@vramik
vramik
opened on Dec 3, 2024

There is implementation of AuthorizationSchema which serves for FGAP purpose.

keycloak/server-spi-private/src/main/java/org/keycloak/authorization/AdminPermissionsSchema.java

Lines 38 to 44 in 4e3e731

public static final String USERS_RESOURCE_TYPE = "Users";
public static final ResourceType USERS = new ResourceType(USERS_RESOURCE_TYPE, Set.of("manage"));
public static final AdminPermissionsSchema SCHEMA = new AdminPermissionsSchema();
private AdminPermissionsSchema() {
super(Map.of(USERS_RESOURCE_TYPE, USERS));
}

We should add "Groups" resource type and its scopes.

As well as the appropriate AdminPermissionEvaluation implementation to support E2E experience.

Metadata

Metadata

Assignees

Labels

area/admin/fine-grained-permissionsrelease/26.2.0team/core-iam

Type

task

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions