Admin Page / Keycloak Role?

[vbhayden]

Morning all,

Which Keycloak role should a user have to be granted admin permissions on the Web Reader?

For the PeBL Reader, the Keycloak integration all seems to be working well, although I'm not sure which role to assign a user in Keycloak to grant them admin access to the Reader itself.

Things like clearing out the cached books and whatnot don't seem possible for regular users, so I assume this is just something straightforward that I haven't found maybe?

Thanks!
-Trey

[miledivovic]

@vbhayden I believe in order to have admin privileges in the reader, the user needs to have their user attribute key/value pair set to "role": "admin" in keycloak. Additionally they need to be part of a group and sub-group.

As far as clearing cached versions of books I don't think there is currently any way for an admin to do this, it would be up to the individuals to clear their caches or potentially you could upload new versions of the book with a different title/ID to get around it.

[vbhayden]

Gotcha, would making it easier for users to remove a cached book be a viable PR maybe? I've only been able to do it by going into browser history and clearing things that way like you mentioned, which has always felt a little roundabout etc.

[vbhayden]

And are there any restrictions on the group / subgroup names? The group requirement feels a bit odd by itself, so I imagine there's a more elegant story behind it maybe.

[miledivovic]

We fixed this in PeBL Pro, I can look and see if I can bring that into this codebase, otherwise yes I think that would be a good PR for sure.
As far as the group names I think just avoid "/" in the name and it should be fine, its a relic from the MCDP7 times when we expected all users to be in groups.