-
Bug
-
Resolution: Done
-
Undefined
-
None
-
False
-
-
False
-
-
Before reporting an issue
[X] I have read and understood the above terms for submitting issues, and I understand that my issue may be closed without action if I do not follow them.
Area
admin/ui
Describe the bug
After a fresh install of Keycloak 26.0.2, on first login with a temp-admin user, the UI displays a "Forbidden, permission needed: query-clients" even if the user has admin role.
See attached gif and static image:
Version
26.0.2
Regression
[X] The issue is a regression
Expected behavior
The administrator (or temp-admin) can see the list of Clients in the master Realm.
Actual behavior
When the administrator tries to list the Clients for the master Realm, a puzzling "Forbidden, permission needed: query-clients" appears briefly, then the Clients are shown.
How to Reproduce?
create and run Dockerfile
```
FROM quay.io/keycloak/keycloak:26.0.2
ENTRYPOINT ["/opt/keycloak/bin/kc.sh","start-dev", "--bootstrap-admin-username", "temp-admin", "--bootstrap-admin-password", "Myp4ssword!!!"]
```
with a valid Postgres 16 db.
On first login with temp-admin credentials, you'll see the problem (reproduces every time).
Anything else?
I tried starting a discussion before filing this bug.
- links to