Uploaded image for project: 'Keycloak'
  1. Keycloak
  2. KEYCLOAK-17120

[REL] Updating user account removes attributes

    XMLWordPrintable

    Details

    • Steps to Reproduce:
      Hide

      1. Create a user with multiple attributes.
      2. Update the value of one of them using AccountFormService.processAccountUpdate()
      3. As a result all other attributes apart from the one that is being updated are removed.

      Show
      1. Create a user with multiple attributes. 2. Update the value of one of them using AccountFormService.processAccountUpdate() 3. As a result all other attributes apart from the one that is being updated are removed.
    • Docs QE Status:
      NEW
    • QE Status:
      NEW

      Description

      Our user update form allows updating only specific attributes of a user.  Some attributes are read-only and must not be updated.  Because of that, they are not used on the update page.  When the update is triggered only shown attributes are posted to the back-end. When the update is preformed, the missing attributes from the response are removed.

      This bug occurs from version Keycloak 12.0.0 because processAccountUpdate() function uses
      a new helper function called updateAccount. From there UserUpdateHelper.update() is called which has a property called removeExistingAttributes that is hard-coded to true.
      This causes the removal of read-only attributes because they aren't sent in the form.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              pcraveiro Pedro Igor Silva
              Reporter:
              viktor.chuchurski Viktor Chuchurski
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: