libre.sh/keycloak-scim
3
0
Fork 0
Code Issues 15 Pull requests Releases Packages Activity Actions

12653 check if fine-grained permissions are enabled before retrieving group memberships of users

Browse source
This commit is contained in:
Sebastian Schuster 2022-06-22 18:19:40 +02:00 committed by Pedro Igor
parent 916cfbbaf1
commit fb978de0d8
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
services/src/main/java/org/keycloak/services/resources/admin/permissions/UserPermissions.java
View file

@ -587,10 +587,12 @@ class UserPermissions implements UserPermissionEvaluator, UserPermissionManageme
}
private boolean canManageByGroup(UserModel user) {
if (authz == null) return false;
return evaluateHierarchy(user, (group) -> root.groups().canManageMembers(group));
}
private boolean canViewByGroup(UserModel user) {
if (authz == null) return false;
return evaluateHierarchy(user, (group) -> root.groups().getGroupsWithViewPermission(group));
}