Repository navigation
Keycloak -18.0.1 issue with authorization and multiple polices/permissions #14853
Unanswered
GaganNoor-tieto
asked this question in
Q&A
Replies: 1 comment 1 reply
|
By scope you mean scopes you assign in resource definition, or a client scope policy? If scope you assign in resource definition, then the model we used is:
|
1 reply
|
Hi Andrius, I have attached few of the details to help understand what we are trying to achieve. Please let me know if any more details are required. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
Hi, we are getting issue with multiple policies/permission.
Policy A - user A with scope A,B,C works fine.
Policy B - user B with scope B,C,D gives 403.
Policy C - user C with scope C,D,E gives 403.
If User B is added to Policy A it works fine and retunes combined result of scope A,B,C,D.
For User C we need to this add this user to both policy A,B and it works fine and retunes combined result of scope A,B,C,D,E.
Both Policies are Positive and Both Permissions are Affirmative.
We want this to work independently. For user B and C to work by adding them to policy B for user B and policy C for user C.
In Evaluate page it shows as expected but from Postman it gives error
All reactions