[deployments](ocis-keycloak) New users can be created from ocis webUI

saw-jan commented 1 year ago

Using example deployemnt of ocis_keycloak from https://github.com/owncloud/ocis/tree/master/deployments/examples/ocis_keycloak, new users can be created from the ocis webUI.

new users cannot be created from ocis webUI but only from keycloak dashboard

CC @rhafer @mmattel

mmattel commented 1 year ago

I guess that a fix (code or deployment) will not make it into 4.0. If it will be a deployment fix only, we can post merging do a docs backport...

ScharfViktor commented 1 year ago

admin also should not delete user using User Management in the webUI.

Steps:

admin creates Alice in the keycloak admin console
Alice logs in and creates some data
Admin deletes Alice using user Management in the webUI - 204 (Alice is deleted)
Admin refreshes user page - Alice reappears (It's correct - need to delete using keycloak admin console)
Alice logs in again - She lost all data

nabim777 commented 4 months ago

Also when we try to edit the user details from oCIS-web then, we have another user creation on ocis-web

Steps to reproduce

from keycloak, admin creates a user brian
Brian logs in oCIS-web
from oCIS-web, admin edit the user brian detail
- changes the user name Brian to anna
- changes the email to anna@example.com
- changes the password to anna
from oCIS-web, admin logs out
from oCIS-web, when anna tries to login with changed username anna and password anna , login failed
But from oCIS-web, when alice tries to login with previous username and password, she is able to login successfully
And when admin of oOCIS-web, list the user, both user are appeared anna and alice

owncloud / ocis