8000 Enforce per-resource view permission on SCIM listings by sguilhen · Pull Request #54790 · keycloak/keycloak · GitHub
[go: up one dir, main page]

Skip to content

Enforce per-resource view permission on SCIM listings - #54790

Open
sguilhen wants to merge 1 commit into
keycloak:release/26.8from
sguilhen:backport-54587-26.8
Open

sguilhen wants to merge 1 commit into
keycloak:release/26.8from
sguilhen:backport-54587-26.8

Conversation

@sguilhen
@sguilhen sguilhen commented Nov 6, 2026
Copy link
Copy Markdown
Contributor
  • filter resources by the VIEW scope when the realm does not use FGAPv2, mirroring UsersResource and GroupsResource

Closes CVE-2026-116470
Closes #54340

(cherry picked from commit 0cbbed9)

- filter resources by the VIEW scope when the realm does not use FGAPv2, mirroring UsersResource and GroupsResource

Closes CVE-2026-116470
Closes keycloak#54340

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
(cherry picked from commit 0cbbed9)
@sguilhen
sguilhen requested a review from a team as a code owner November 6, 2026 17:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

0