Uploaded image for project: 'Red Hat build of Keycloak'
  1. Red Hat build of Keycloak
  2. RHBK-2585

[Keycloak 26.0.2] Getting "Forbidden, permission needed: query-clients" as temp-admin [GHI#34402]

XMLWordPrintable

    • False
    • Hide

      None

      Show
      None
    • False

      Before reporting an issue

      [X] I have read and understood the above terms for submitting issues, and I understand that my issue may be closed without action if I do not follow them.

      Area

      admin/ui

      Describe the bug

      After a fresh install of Keycloak 26.0.2, on first login with a temp-admin user, the UI displays a "Forbidden, permission needed: query-clients" even if the user has admin role.

      See attached gif and static image:

      !forbidden

      !image

      Version

      26.0.2

      Regression

      [X] The issue is a regression

      Expected behavior

      The administrator (or temp-admin) can see the list of Clients in the master Realm.

      Actual behavior

      When the administrator tries to list the Clients for the master Realm, a puzzling "Forbidden, permission needed: query-clients" appears briefly, then the Clients are shown.

      How to Reproduce?

      create and run Dockerfile
      ```
      FROM quay.io/keycloak/keycloak:26.0.2

      ENTRYPOINT ["/opt/keycloak/bin/kc.sh","start-dev", "--bootstrap-admin-username", "temp-admin", "--bootstrap-admin-password", "Myp4ssword!!!"]
      ```
      with a valid Postgres 16 db.
      On first login with temp-admin credentials, you'll see the problem (reproduces every time).

      Anything else?

      I tried starting a discussion before filing this bug.

              Unassigned Unassigned
              pvlha Pavel Vlha
              Keycloak UI
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: