mirror/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-02-12 10:19:13 -06:00
Code Issues Packages Projects Releases Wiki Activity

Make sure searches by identifiers are filtered

Browse Source 
Closes #38679

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
This commit is contained in:
Pedro Igor
2025-04-07 09:59:43 -03:00
committed by GitHub
parent a4ca92ab4d
commit d98ca0a2a2
4 changed files with 37 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
services/src/main/java/org/keycloak/services/resources/admin/ClientsResource.java
View File

@@ -138,7 +138,11 @@ public class ClientsResource {
} else {
ClientModel client = realm.getClientByClientId(clientId);
if (client != null) {
clientModels = Stream.of(client);
if (AdminPermissionsSchema.SCHEMA.isAdminPermissionsEnabled(realm)) {
clientModels = Stream.of(client).filter(auth.clients()::canView);
} else {
clientModels = Stream.of(client);
}
}
}

3
services/src/main/java/org/keycloak/services/resources/admin/UsersResource.java
View File

@@ -303,6 +303,9 @@ public class UsersResource {
session.users().getUserById(realm, search.substring(SEARCH_ID_PARAMETER.length()).trim());
if (userModel != null) {
userModels = Stream.of(userModel);
if (AdminPermissionsSchema.SCHEMA.isAdminPermissionsEnabled(realm)) {
userModels = userModels.filter(userPermissionEvaluator::canView);
}
}
} else {
Map<String, String> attributes = new HashMap<>();