Closed
Description
When searching for permissions following behavior occurs:
Steps:
- create
user-1anduser-2users - create user permission to
viewspecific user and selectuser-1 - create user permission to
viewspecific user and selectuser-1anduser-2 - in
Search permissionchooseUserstype and selectuser-2 - click
Search - there is request sent, similar to
GET | http://localhost:8080/admin/realms/master/clients/7eb7ecaa-a65f-4918-a7ae-4a37c54181e5/authz/resource-server/permission/scope?first=0&max=11&resourceType=Users&resource=6f1155c0-e518-4301-9cb1-476aeeba53ef - one permission is returned and visible in the list
- click
Search permissionagain inUsersfield adduser-1, now there are two user present - but request sent is exactly the same:
GET | http://localhost:8080/admin/realms/master/clients/7eb7ecaa-a65f-4918-a7ae-4a37c54181e5/authz/resource-server/permission/scope?first=0&max=11&resourceType=Users&resource=6f1155c0-e518-4301-9cb1-476aeeba53ef - and therefore the returned permissions is also the same
It seems that second user who was added was omitted from the request.
It request should look like GET | http://localhost:8080/admin/realms/master/clients/7eb7ecaa-a65f-4918-a7ae-4a37c54181e5/authz/resource-server/permission/scope?first=0&max=11&resourceType=Users&resource=6f1155c0-e518-4301-9cb1-476aeeba53ef&${user-1.id}