Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

User tab "Identity Provider Links" is not available when only "view-users" or "manage-users" realm-management role is assigned as in the v1 Keycloak theme #27538

Closed
1 of 2 tasks
mpalavrov opened this issue Mar 5, 2024 · 1 comment · Fixed by #29428
Assignees
Labels
area/account/ui kind/bug Categorizes a PR related to a bug priority/important Must be worked on very soon release/25.0.0 team/ui

Comments

@mpalavrov
Copy link

mpalavrov commented Mar 5, 2024

Before reporting an issue

  • I have read and understood the above terms for submitting issues, and I understand that my issue may be closed without action if I do not follow them.

Area

account/ui

Describe the bug

When Realm Admin user having "realm-management" role "query-users" and "manage-users" assigned, is not able to see the "Identity Provider Links" tab, which was possible in KC v20 with the old Admin UI.
In order to see the Identity Provider Links tab in the new Admin UI, with KC v23, the user needs to have "view-identity-providers" realm-management role assigned. This is not right, as this way the Realm Admin user will be able to see the Identity Provider configuration as well, not only the Linked Identity Providers to the user

Version

24.0.1

Regression

  • The issue is a regression

Expected behavior

The "Identity Provider Links" tab needs to be available for Realm Admin users, having "realm-management" roles "query-users" and view/manage-users", like in the old UI:
Old UI:
image
New UI *but with "view-identity-providers" permission:
image

Actual behavior

The Identity Providers Link tab is not available when no "view-identity-providers" permission:
image

Or in case the "view-identity-providers" permission is assigned, the Identity Providers are visible for the Admin user, together with their configuration when any:
image

How to Reproduce?

  1. Create Realm Admin user with "query-users" and "manage/view-users" realm-management Client role with
  2. Set credentials for the user
  3. Sign in with the security-admin-console with the created user
  4. Open an user
  5. No "Identity Providers Link" tab will be visible

It can be compared with the Old UI, where it exists with the same permissions.

Anything else?

No response

@keycloak-github-bot
Copy link

Due to the amount of issues reported by the community we are not able to prioritise resolving this issue at the moment.

If you are affected by this issue, upvote it by adding a 👍 to the description. We would also welcome a contribution to fix the issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/account/ui kind/bug Categorizes a PR related to a bug priority/important Must be worked on very soon release/25.0.0 team/ui
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants