keycloak/docs/documentation/server_admin/topics/admin-console-permissions
Oluwatobi Mustapha 24a819eabc
Fix FGAP deny evaluation for manage-group-membership
Add the missing Users FGAP scope alias from manage-group-membership to Groups manage-membership so deny permissions on group members apply during user membership updates.

Add a regression test covering a protected group member, an unrelated user, and the no-mutation postcondition after a forbidden request.

Closes keycloak#46693
2026-03-09 12:01:17 -03:00
..
fine-grain-v2.adoc Fix FGAP deny evaluation for manage-group-membership 2026-03-09 12:01:17 -03:00
fine-grain.adoc Deprecate Fine-Grained Admin Permissions v1 2025-12-08 10:26:27 -03:00
master-realm.adoc Clarify documentation. 2026-01-12 10:36:10 -03:00
per-realm.adoc FGAP documentation 2025-04-03 09:44:32 -03:00