libre.sh/keycloak-scim
3
0
Fork 0
Code Issues 15 Pull requests Releases Packages Activity Actions

added fine-grained auth on EffectiveRoleMappingResource (#20417)

Browse source
This commit is contained in:
Erik Jan de Wit 2023-05-31 16:09:18 +02:00 committed by GitHub
parent 53dfb44a8f
commit 3862f82c2d
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
rest/admin-ui-ext/src/main/java/org/keycloak/admin/ui/rest/EffectiveRoleMappingResource.java
View file

@ -87,6 +87,7 @@ public class EffectiveRoleMappingResource extends RoleMappingResource {
if (client == null) { if (client == null) {
throw new NotFoundException("Could not find client"); throw new NotFoundException("Could not find client");
} }
auth.clients().requireView(client); auth.clients().requireView(client);
return mapping(client::hasScope).collect(Collectors.toList()); return mapping(client::hasScope).collect(Collectors.toList());
} }
@ -115,6 +116,7 @@ public class EffectiveRoleMappingResource extends RoleMappingResource {
throw new NotFoundException("Could not find group"); throw new NotFoundException("Could not find group");
} }
auth.groups().requireView(group);
return mapping(group::hasRole).collect(Collectors.toList()); return mapping(group::hasRole).collect(Collectors.toList());
} }
@ -143,6 +145,7 @@ public class EffectiveRoleMappingResource extends RoleMappingResource {
else throw new ForbiddenException(); else throw new ForbiddenException();
} }
auth.users().requireView(user);
return mapping(user::hasRole).collect(Collectors.toList()); return mapping(user::hasRole).collect(Collectors.toList());
} }
@ -165,6 +168,7 @@ public class EffectiveRoleMappingResource extends RoleMappingResource {
)} )}
) )
public final List<ClientRole> listCompositeRealmRoleMappings() { public final List<ClientRole> listCompositeRealmRoleMappings() {
auth.roles().requireList(realm);
final RoleModel defaultRole = this.realm.getDefaultRole(); final RoleModel defaultRole = this.realm.getDefaultRole();
return mapping(o -> o.hasRole(defaultRole)).collect(Collectors.toList()); return mapping(o -> o.hasRole(defaultRole)).collect(Collectors.toList());
} }