Skip to content

Commit 381b138

Browse files
author
Rob Tjalma
authored
Merge pull request #42 from com-pas/new-roles
Added new STD Roles
2 parents fbf33b2 + 8b0062d commit 381b138

File tree

1 file changed

+75
-41
lines changed

1 file changed

+75
-41
lines changed

‎compas/keycloak/keycloak_compas_realm.json‎

Lines changed: 75 additions & 41 deletions
Original file line numberDiff line numberDiff line change
@@ -389,6 +389,13 @@
389389
"clientRole" : true,
390390
"containerId" : "12ab3cb2-73f3-4855-bed8-9ab2af75f595",
391391
"attributes" : { }
392+
}, {
393+
"id" : "8e51122b-869a-42c5-99cc-8451ca34fc4a",
394+
"name" : "STD_UPDATE",
395+
"composite" : false,
396+
"clientRole" : true,
397+
"containerId" : "12ab3cb2-73f3-4855-bed8-9ab2af75f595",
398+
"attributes" : { }
392399
}, {
393400
"id" : "72a887f9-80d2-4f8a-bd64-4672c1855a97",
394401
"name" : "SCD_READ",
@@ -397,6 +404,20 @@
397404
"clientRole" : true,
398405
"containerId" : "12ab3cb2-73f3-4855-bed8-9ab2af75f595",
399406
"attributes" : { }
407+
}, {
408+
"id" : "fbee4e24-a426-45c2-8c20-7218c97b5d49",
409+
"name" : "STD_CREATE",
410+
"composite" : false,
411+
"clientRole" : true,
412+
"containerId" : "12ab3cb2-73f3-4855-bed8-9ab2af75f595",
413+
"attributes" : { }
414+
}, {
415+
"id" : "60078bbf-cba3-4806-bd0c-eb2e40232106",
416+
"name" : "STD_READ",
417+
"composite" : false,
418+
"clientRole" : true,
419+
"containerId" : "12ab3cb2-73f3-4855-bed8-9ab2af75f595",
420+
"attributes" : { }
400421
}, {
401422
"id" : "d1c29eda-f21a-44d5-af31-b23bb7863bb3",
402423
"name" : "SED_CREATE",
@@ -485,6 +506,13 @@
485506
"clientRole" : true,
486507
"containerId" : "12ab3cb2-73f3-4855-bed8-9ab2af75f595",
487508
"attributes" : { }
509+
}, {
510+
"id" : "6b0197b7-c1ad-4fd6-9a77-f3e7fdf6d7ba",
511+
"name" : "STD_DELETE",
512+
"composite" : false,
513+
"clientRole" : true,
514+
"containerId" : "12ab3cb2-73f3-4855-bed8-9ab2af75f595",
515+
"attributes" : { }
488516
}, {
489517
"id" : "8a57394b-4e9f-41e6-a247-24639e636b8a",
490518
"name" : "ICD_CREATE",
@@ -599,12 +627,30 @@
599627
}
600628
},
601629
"groups" : [ {
630+
"id" : "018a79e5-9a33-4810-804b-79e5eacf64d1",
631+
"name" : "compas-editor-group",
632+
"path" : "/compas-editor-group",
633+
"attributes" : { },
634+
"realmRoles" : [ ],
635+
"clientRoles" : {
636+
"scl-auto-alignment" : [ "USER" ],
637+
"scl-data-service" : [ "IID_DELETE", "SED_UPDATE", "CID_DELETE", "ISD_READ", "ICD_DELETE", "SSD_DELETE", "SSD_UPDATE", "SCD_DELETE", "ICD_READ", "SED_DELETE", "ICD_UPDATE", "SCD_CREATE", "SSD_READ", "CID_UPDATE", "STD_UPDATE", "SCD_READ", "STD_CREATE", "STD_READ", "SED_CREATE", "ISD_DELETE", "ISD_UPDATE", "IID_READ", "ISD_CREATE", "CID_READ", "IID_CREATE", "SED_READ", "IID_UPDATE", "CID_CREATE", "SCD_UPDATE", "STD_DELETE", "ICD_CREATE", "SSD_CREATE" ],
638+
"cim-mapping" : [ "USER" ],
639+
"openscd" : [ "USER" ]
640+
},
641+
"subGroups" : [ ]
642+
}, {
602643
"id" : "3284578f-e4fa-4cce-9cce-ba98f3d0f5b1",
603-
"name" : "compas-group",
604-
"path" : "/compas-group",
644+
"name" : "compas-read-group",
645+
"path" : "/compas-read-group",
605646
"attributes" : { },
606647
"realmRoles" : [ ],
607-
"clientRoles" : { },
648+
"clientRoles" : {
649+
"scl-auto-alignment" : [ "USER" ],
650+
"scl-data-service" : [ "ICD_READ", "IID_READ", "ISD_READ", "CID_READ", "SSD_READ", "SCD_READ", "SED_READ", "STD_READ" ],
651+
"cim-mapping" : [ "USER" ],
652+
"openscd" : [ "USER" ]
653+
},
608654
"subGroups" : [ ]
609655
} ],
610656
"defaultRole" : {
@@ -727,14 +773,8 @@
727773
"disableableCredentialTypes" : [ ],
728774
"requiredActions" : [ ],
729775
"realmRoles" : [ "default-roles-compas" ],
730-
"clientRoles" : {
731-
"scl-data-service" : [ "IID_DELETE", "SED_UPDATE", "CID_DELETE", "ISD_READ", "ICD_DELETE", "SSD_DELETE", "SSD_UPDATE", "SCD_DELETE", "ICD_READ", "SED_DELETE", "ICD_UPDATE", "SCD_CREATE", "SSD_READ", "CID_UPDATE", "SCD_READ", "SED_CREATE", "ISD_DELETE", "ISD_UPDATE", "IID_READ", "ISD_CREATE", "CID_READ", "IID_CREATE", "SED_READ", "IID_UPDATE", "CID_CREATE", "SCD_UPDATE", "ICD_CREATE", "SSD_CREATE" ],
732-
"scl-auto-alignment" : [ "USER" ],
733-
"cim-mapping" : [ "USER" ],
734-
"openscd" : [ "USER" ]
735-
},
736776
"notBefore" : 1629874406,
737-
"groups" : [ ]
777+
"groups" : [ "/compas-editor-group", "/compas-read-group" ]
738778
}, {
739779
"id" : "deed4832-8531-43ee-8bf2-20bc534fee45",
740780
"createdTimestamp" : 1628761517719,
@@ -754,14 +794,8 @@
754794
"disableableCredentialTypes" : [ ],
755795
"requiredActions" : [ ],
756796
"realmRoles" : [ "default-roles-compas" ],
757-
"clientRoles" : {
758-
"scl-data-service" : [ "ICD_READ", "IID_READ", "ISD_READ", "CID_READ", "SSD_READ", "SCD_READ", "SED_READ" ],
759-
"scl-auto-alignment" : [ "USER" ],
760-
"cim-mapping" : [ "USER" ],
761-
"openscd" : [ "USER" ]
762-
},
763797
"notBefore" : 1629874401,
764-
"groups" : [ ]
798+
"groups" : [ "/compas-read-group" ]
765799
}, {
766800
"id" : "f39d44bd-466a-47bf-917d-aebd7e6ed3ca",
767801
"createdTimestamp" : 1627390417072,
@@ -1709,7 +1743,7 @@
17091743
"subType" : "authenticated",
17101744
"subComponents" : { },
17111745
"config" : {
1712-
"allowed-protocol-mapper-types" : [ "saml-user-attribute-mapper", "oidc-full-name-mapper", "oidc-address-mapper", "oidc-sha256-pairwise-sub-mapper", "oidc-usermodel-attribute-mapper", "oidc-usermodel-property-mapper", "saml-role-list-mapper", "saml-user-property-mapper" ]
1746+
"allowed-protocol-mapper-types" : [ "oidc-sha256-pairwise-sub-mapper", "oidc-address-mapper", "oidc-usermodel-attribute-mapper", "oidc-full-name-mapper", "saml-user-property-mapper", "saml-role-list-mapper", "saml-user-attribute-mapper", "oidc-usermodel-property-mapper" ]
17131747
}
17141748
}, {
17151749
"id" : "1df6c9e4-319c-43c1-a0f8-e97a9741cd36",
@@ -1718,7 +1752,7 @@
17181752
"subType" : "anonymous",
17191753
"subComponents" : { },
17201754
"config" : {
1721-
"allowed-protocol-mapper-types" : [ "saml-role-list-mapper", "oidc-full-name-mapper", "saml-user-attribute-mapper", "oidc-usermodel-attribute-mapper", "saml-user-property-mapper", "oidc-address-mapper", "oidc-sha256-pairwise-sub-mapper", "oidc-usermodel-property-mapper" ]
1755+
"allowed-protocol-mapper-types" : [ "saml-user-attribute-mapper", "oidc-usermodel-attribute-mapper", "oidc-address-mapper", "oidc-full-name-mapper", "oidc-sha256-pairwise-sub-mapper", "saml-user-property-mapper", "oidc-usermodel-property-mapper", "saml-role-list-mapper" ]
17221756
}
17231757
}, {
17241758
"id" : "276e7a01-2481-494c-a009-81965ed751a3",
@@ -1814,7 +1848,7 @@
18141848
"internationalizationEnabled" : false,
18151849
"supportedLocales" : [ ],
18161850
"authenticationFlows" : [ {
1817-
"id" : "7a8a0416-499b-4461-8ede-d91747d2a0a0",
1851+
"id" : "7fb2cb1b-07a1-4d64-9f21-a942107e7df0",
18181852
"alias" : "Account verification options",
18191853
"description" : "Method with which to verity the existing account",
18201854
"providerId" : "basic-flow",
@@ -1836,7 +1870,7 @@
18361870
"autheticatorFlow" : true
18371871
} ]
18381872
}, {
1839-
"id" : "981fc24a-2689-48d2-85b8-66bae7772fc2",
1873+
"id" : "427e24cc-b71e-49ef-a6cd-7ed6c623e870",
18401874
"alias" : "Authentication Options",
18411875
"description" : "Authentication options.",
18421876
"providerId" : "basic-flow",
@@ -1865,7 +1899,7 @@
18651899
"autheticatorFlow" : false
18661900
} ]
18671901
}, {
1868-
"id" : "cb13b985-8b73-4a28-99e1-78730bfa44d8",
1902+
"id" : "e23dca88-6596-49d6-8b22-ae5b204a2d08",
18691903
"alias" : "Browser - Conditional OTP",
18701904
"description" : "Flow to determine if the OTP is required for the authentication",
18711905
"providerId" : "basic-flow",
@@ -1887,7 +1921,7 @@
18871921
"autheticatorFlow" : false
18881922
} ]
18891923
}, {
1890-
"id" : "64168036-a8e8-48c1-aa88-dec32dced521",
1924+
"id" : "486bd779-5f66-4c66-a195-0c7615216e8f",
18911925
"alias" : "Direct Grant - Conditional OTP",
18921926
"description" : "Flow to determine if the OTP is required for the authentication",
18931927
"providerId" : "basic-flow",
@@ -1909,7 +1943,7 @@
19091943
"autheticatorFlow" : false
19101944
} ]
19111945
}, {
1912-
"id" : "460c0336-faad-444b-8174-5b7e3dc77aa7",
1946+
"id" : "f3b4a1ac-7836-48e4-be60-b5591ef4dc0c",
19131947
"alias" : "First broker login - Conditional OTP",
19141948
"description" : "Flow to determine if the OTP is required for the authentication",
19151949
"providerId" : "basic-flow",
@@ -1931,7 +1965,7 @@
19311965
"autheticatorFlow" : false
19321966
} ]
19331967
}, {
1934-
"id" : "716a7846-ccaf-4d0f-9532-833c3ea54cb6",
1968+
"id" : "3c90d795-f083-4d7d-89be-d570786d94fe",
19351969
"alias" : "Handle Existing Account",
19361970
"description" : "Handle what to do if there is existing account with same email/username like authenticated identity provider",
19371971
"providerId" : "basic-flow",
@@ -1953,7 +1987,7 @@
19531987
"autheticatorFlow" : true
19541988
} ]
19551989
}, {
1956-
"id" : "d79a8017-b719-495d-816c-19ba6aa96f08",
1990+
"id" : "156a87ea-eec7-491c-9dd6-eed787b32301",
19571991
"alias" : "Reset - Conditional OTP",
19581992
"description" : "Flow to determine if the OTP should be reset or not. Set to REQUIRED to force.",
19591993
"providerId" : "basic-flow",
@@ -1975,7 +2009,7 @@
19752009
"autheticatorFlow" : false
19762010
} ]
19772011
}, {
1978-
"id" : "6eeb2628-0a4d-49e7-ba89-b2fd5ffe15ec",
2012+
"id" : "ffbd38f3-304a-4802-82a9-8e48453a8223",
19792013
"alias" : "User creation or linking",
19802014
"description" : "Flow for the existing/non-existing user alternatives",
19812015
"providerId" : "basic-flow",
@@ -1998,7 +2032,7 @@
19982032
"autheticatorFlow" : true
19992033
} ]
20002034
}, {
2001-
"id" : "78cb2449-f61b-4374-a3c1-d7883b915304",
2035+
"id" : "b5c19f99-240f-47c0-bfc7-cbaab48c6412",
20022036
"alias" : "Verify Existing Account by Re-authentication",
20032037
"description" : "Reauthentication of existing account",
20042038
"providerId" : "basic-flow",
@@ -2020,7 +2054,7 @@
20202054
"autheticatorFlow" : true
20212055
} ]
20222056
}, {
2023-
"id" : "11460871-42f7-408d-96da-fba86352e5c8",
2057+
"id" : "032b408c-d9ef-4371-92cb-f754fd54285a",
20242058
"alias" : "browser",
20252059
"description" : "browser based authentication",
20262060
"providerId" : "basic-flow",
@@ -2056,7 +2090,7 @@
20562090
"autheticatorFlow" : true
20572091
} ]
20582092
}, {
2059-
"id" : "36cb3fe2-9543-4ed2-9f5a-fb13dfe4128d",
2093+
"id" : "9a3964ec-1839-4f2d-9dcf-93e6dbe2d069",
20602094
"alias" : "clients",
20612095
"description" : "Base authentication for clients",
20622096
"providerId" : "client-flow",
@@ -2092,7 +2126,7 @@
20922126
"autheticatorFlow" : false
20932127
} ]
20942128
}, {
2095-
"id" : "2dc631f6-2536-4026-aeac-5485acf1cd1d",
2129+
"id" : "a7d0f016-5d73-4d74-be53-1ad54a328464",
20962130
"alias" : "direct grant",
20972131
"description" : "OpenID Connect Resource Owner Grant",
20982132
"providerId" : "basic-flow",
@@ -2121,7 +2155,7 @@
21212155
"autheticatorFlow" : true
21222156
} ]
21232157
}, {
2124-
"id" : "3dfc2ea7-f7f7-4b04-adb2-079066a45ac8",
2158+
"id" : "d9fc1e42-ef91-4f30-9df9-b178f94558b5",
21252159
"alias" : "docker auth",
21262160
"description" : "Used by Docker clients to authenticate against the IDP",
21272161
"providerId" : "basic-flow",
@@ -2136,7 +2170,7 @@
21362170
"autheticatorFlow" : false
21372171
} ]
21382172
}, {
2139-
"id" : "1ebdc3c5-096b-4a48-b2f2-dce9facfa8cd",
2173+
"id" : "45167191-e9a0-46fc-b3e0-84042ba22a04",
21402174
"alias" : "first broker login",
21412175
"description" : "Actions taken after first broker login with identity provider account, which is not yet linked to any Keycloak account",
21422176
"providerId" : "basic-flow",
@@ -2159,7 +2193,7 @@
21592193
"autheticatorFlow" : true
21602194
} ]
21612195
}, {
2162-
"id" : "c35d97ad-92c8-4992-93f6-725db436f10a",
2196+
"id" : "454e5e3b-ba60-43c8-9c7b-391971deec3e",
21632197
"alias" : "forms",
21642198
"description" : "Username, password, otp and other auth forms.",
21652199
"providerId" : "basic-flow",
@@ -2181,7 +2215,7 @@
21812215
"autheticatorFlow" : true
21822216
} ]
21832217
}, {
2184-
"id" : "c7ed2543-a6d1-41d2-ac11-58f4b1b805b5",
2218+
"id" : "3aff2caa-dcae-4e4a-b452-edfbff9ad09a",
21852219
"alias" : "http challenge",
21862220
"description" : "An authentication flow based on challenge-response HTTP Authentication Schemes",
21872221
"providerId" : "basic-flow",
@@ -2203,7 +2237,7 @@
22032237
"autheticatorFlow" : true
22042238
} ]
22052239
}, {
2206-
"id" : "93735a5a-e42e-48d9-b373-b3016f676eb3",
2240+
"id" : "891f5cf9-7c67-477a-9b9a-052426796e8c",
22072241
"alias" : "registration",
22082242
"description" : "registration flow",
22092243
"providerId" : "basic-flow",
@@ -2219,7 +2253,7 @@
22192253
"autheticatorFlow" : true
22202254
} ]
22212255
}, {
2222-
"id" : "c27bd9e8-ea55-4753-8443-80a6280cbce6",
2256+
"id" : "ada03e27-e052-4a57-9ee0-5b432edfe066",
22232257
"alias" : "registration form",
22242258
"description" : "registration form",
22252259
"providerId" : "form-flow",
@@ -2255,7 +2289,7 @@
22552289
"autheticatorFlow" : false
22562290
} ]
22572291
}, {
2258-
"id" : "b689031f-9bb4-4fb4-aae6-02aaa27d71e0",
2292+
"id" : "bf724311-2f1a-4667-ac09-0e660db83f7d",
22592293
"alias" : "reset credentials",
22602294
"description" : "Reset credentials for a user if they forgot their password or something",
22612295
"providerId" : "basic-flow",
@@ -2291,7 +2325,7 @@
22912325
"autheticatorFlow" : true
22922326
} ]
22932327
}, {
2294-
"id" : "85a94e50-e406-4bc7-9acd-519139f956bf",
2328+
"id" : "27b4a61a-89c6-4ce7-b4bc-7844b2384980",
22952329
"alias" : "saml ecp",
22962330
"description" : "SAML ECP Profile Authentication Flow",
22972331
"providerId" : "basic-flow",
@@ -2307,13 +2341,13 @@
23072341
} ]
23082342
} ],
23092343
"authenticatorConfig" : [ {
2310-
"id" : "42439c1e-54fc-4b11-a94f-607cb9025267",
2344+
"id" : "3871e726-fb96-40e9-ba7a-a9c5f3b5e239",
23112345
"alias" : "create unique user config",
23122346
"config" : {
23132347
"require.password.update.after.registration" : "false"
23142348
}
23152349
}, {
2316-
"id" : "439ae195-c51d-4b0b-af66-f3464ad43e2f",
2350+
"id" : "1b6e98b2-afd9-4326-bcaf-e68047699d81",
23172351
"alias" : "review profile config",
23182352
"config" : {
23192353
"update.profile.on.first.login" : "missing"

0 commit comments

Comments
 (0)