Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Assign Service Account Role ${SUPER_USER_ROLE} to Client ${RS_CLIENT_ID} by initial Keycloak configuration #4333

Closed
gunterze opened this issue Jan 5, 2024 · 0 comments
Assignees
Labels
enhancement New feature or request
Milestone

Comments

@gunterze
Copy link
Member

gunterze commented Jan 5, 2024

Assign Service Account Role ${SUPER_USER_ROLE:-root} to Client ${RS_CLIENT_ID:-dcm4chee-arc-rs} by initial Keycloak configuration to enable to invoke RESTful services with access token dedicated to this client retrieved by OAuth2 Client Credentials Grant.

Before #4318, it was sufficient to assign ${AUTH_USER_ROLE:-user} as Service Account Role to Client ${RS_CLIENT_ID:-dcm4chee-arc-rs} to ensure such behavior, because

Archive Network AE Attribute :

Name Type Description (LDAP Attribute)
Accepted User Role(s) string Roles of users from which web requests are accepted; any if absent.
(dcmAcceptedUserRole)

was configured as

  • ${AUTH_USER_ROLE:-user}
  • ${ADMIN_USER_ROLE:-admin}

now:

  • ${REGULAR_USER_ROLE:-user}
  • ${ADMIN_USER_ROLE:-admin}
@gunterze gunterze added the enhancement New feature or request label Jan 5, 2024
@gunterze gunterze added this to the 5.31.3 milestone Jan 5, 2024
@gunterze gunterze self-assigned this Jan 5, 2024
@gunterze gunterze changed the title Assign _Service Account Role_ ${ROOT_USER_ROLE} to Client ${RS_CLIENT_ID} by initial Keycloak configuration Assign Service Account Role ${ROOT_USER_ROLE} to Client ${RS_CLIENT_ID} by initial Keycloak configuration Jan 5, 2024
@gunterze gunterze changed the title Assign Service Account Role ${ROOT_USER_ROLE} to Client ${RS_CLIENT_ID} by initial Keycloak configuration Assign Service Account Role ${SUPER_USER_ROLE} to Client ${RS_CLIENT_ID} by initial Keycloak configuration Jan 5, 2024
gunterze added a commit to dcm4che-dockerfiles/keycloak-quarkus that referenced this issue Jan 5, 2024
@gunterze gunterze closed this as completed Jan 5, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant