upstream/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-05-28 04:13:22 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

[FGAP] Override canList() for V2.

Browse source 
Closes #38641

Signed-off-by: vramik <vramik@redhat.com>
This commit is contained in:
vramik 2025-04-03 12:26:06 +02:00 committed by Pedro Igor
parent 669acefd5c
commit 999d9aa75b
2 changed files with 8 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
services/src/main/java/org/keycloak/services/resources/admin/permissions/ClientPermissionEvaluator.java
View file

@ -71,7 +71,9 @@ public interface ClientPermissionEvaluator {
/**
* Returns {@code true} if {@link #canView()} returns {@code true}.
* <p/>
* Or if the caller has at least one of the {@link AdminRoles#QUERY_CLIENTS} or {@link AdminRoles#QUERY_USERS} roles.
* Or if the caller has at least one of the {@link AdminRoles#QUERY_CLIENTS} role.
* <p/>
* V1: or {@link AdminRoles#QUERY_USERS} roles.
*/
boolean canList();

5
services/src/main/java/org/keycloak/services/resources/admin/permissions/ClientPermissionsV2.java
View file

@ -48,6 +48,11 @@ class ClientPermissionsV2 extends ClientPermissions {
super(session, realm, authz, root);
}
@Override
public boolean canList() {
return root.hasOneAdminRole(AdminRoles.QUERY_CLIENTS) || canView();
}
@Override
public boolean canConfigure(ClientModel client) {
if (canManage(client)) return true;