Repository navigation
Replies: 4 comments 8 replies
|
Sounds great. |
That was the intent. That's what we call "sections". I'll make that more explicit in the requirements. |
|
@ssilvert if you are replying to a comment you can use the 'Write a reply' text box, otherwise you'll start a new thread like this one. |
|
One question from my side. I want to have a fine granted permissions for the admin console. For example a Realm-Admin-User should have only this permissions:
|
|
You should be able to do this with fine-grained permissions. If you discover that fine-grained has a bug or missing functionality for your use case then open an issue. |
|
That being said, we do want to make it easy to remove and replace sections as mentioned in the requirements above. So what you propose would indeed be another approach in the future. But if fine-grained can do the job then I suggest you go with that instead because you wouldn't have a code base of your own to maintain. |
|
How can i restrict an user to create clients without the right to manage all clients - based on the fine-grained permissions? |
|
@braunpa That's way outside the scope of this discussion. I suggest you start a new one or use the keycloak-users mailing list. |
|
Thank you for providing this update and a separate discussion. Though I must admit I'm sad to see the state this problem is still in and I feel this hasn't moved forward at all since the removal of the themability of the admin/account consoles. Nevertheless I am happy to see this thread being made and hope to see some progress. I am also willing to help with any development on this issue. As for the adding some points:
|
|
@Shuyinsama so you want a 3rd way to add attributes to users? How would this differ from when you don't have user profile enabled? |
|
So what we used to do was that we've altered the create user and edit user views of the admin theme. In those forms we added new fields with specific options and or validations. These fields were then saved as a "Attribute" in the "Attributes" tab section of a user. Next to that we disabled the "Attributes" tab for out clients 8000 so they could only alter those attributes throught the edit form. Our clients could only create or save a user if those fields were set. That way our code would not fail when getting these Key/value pairs At the moment these tabs are back and the form doesnt have our custom fields anymore making it possible for our clients to create/edit a user without those attributes resulting in errors in our application. So I don't necessarily want a 3rd way but a good way to be able to alter the create/edit forms of the theme without having the "User Profiles" feature enabled. Unless "User Profiles" is gonna be the default and the templates would work like this anyway |
|
User Profile will definitely be the default and preferred way to manage user attributes going forward. How we allow other forms to be altered/added/removed is still under consideration. |
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
There have been several discussions about providing easier customization of our UI offerings. This is especially true of the new Admin and Account consoles. I want to put forth proposed requirements and get some feedback. I'd like to know what is most important to the community. Feel free to share any thoughts and ideas.
Goal
The overall goal for customization of Keycloak Admin Console and Keycloak Account Console is that both should be more easily and comprehensively customizable than the old Angular/Freemarker versions.
Requirements List
All reactions