* add Realm Roles page
* add section for no realm roles
* update role-model, fixed UI to match designs
* fix paths
* add storybook demo and role actions kebab
* fix build and clean up
* fix formatting
* fix lint
* fix test and update snapshot
* fix storybook demo
* update snapshot after rebase
* PR feedback from Stan
* add back pf addons
* Update src/realm-roles/RealmRolesSection.tsx
Co-authored-by: Stan Silvert <ssilvert@redhat.com>
* fix format
* localize NoRealmRoles component
* fix formatting
* changes to PR suggested by Sarah
Co-authored-by: Stan Silvert <ssilvert@redhat.com>
- Adjust feature pack to depend on "wildfly-galleon-pack".
- Declare dependency from "keycloak-client-oidc" on "undertow" and "ee" layers.
- Update name of layer to "keycloak-client-oidc".
- Update the producer to match the group and artifact ID of the maven artifact.
* moved files into new structure
* translation files / namespace per "page"
fixes: #77
* renamed pages to sections
* moved save, delete and others to common bundle
Problem:
Using fine-grained admin permissions on groups, it is not permitted to create new users
within a group.
Cause:
The POST /{realm}/users API does not check permission for each group part of the new
user representation
Solution:
- Change access logic for POST /{realm}/users to require MANAGE_MEMBERS and
MANAGE_MEMBERSHIP permissions on each of the incoming groups
Tests:
Manual API testing performed:
1. admin user from master realm:
- POST /{realm}/users without groups => HTTP 201 user created
- POST /{realm}/users with groups => HTTP 201 user created
2. user with MANAGE_MEMBERS & MANAGE_MEMBERSHIP permissions on group1
- POST /{realm}/users without groups => HTTP 403 user NOT created
- POST /{realm}/users with group1 => HTTP 201 user created
- POST /{realm}/users with group1 & group2 => HTTP 403 user NOT created
- POST /{realm}/users with group1 & wrong group path => HTTP 400 user NOT created
3. user with MANAGE_MEMBERS permission on group1
- POST /{realm}/users without groups => HTTP 403 user NOT created
- POST /{realm}/users with group1 => HTTP 403 user NOT created
- POST /{realm}/users with group1 & group2 => HTTP 403 user NOT created
- POST /{realm}/users with group1 & wrong group path => HTTP 400 user NOT created
