Skip to content

Draft: TEST unique realm scenario

Xavier Bonet requested to merge TEST_unique_realm_scenario into main

This branch is a TEST environment to check the scenario with a UNIQUE realm in KC instead have one realm per CE.

It means that for each CE we need to have a KC CLIENT entity into this unique realm.

In fact we probably we will need to have 3 KC clients per CE: odoo, ov_back, ov_front.

In addition, in order to identify the KC clients that belongs to different CE's, we need to add (for example) a PREFIX to the name of each CK client mapped to the unique ID of each CE (id of the Odoo res_company record), for instance: 12_odoo and 12_ov_front will be the KC client for Odoo and ov_front related to the CE that have the ID = 12.

WIP: The roles (ce_member, ce_admin, ...) of each user must be 'moved' at KC-client level, instead at KC-realm level. To do that we will implement the KC client_roles functionality. In order to assign those KC 'client_roles' we create several KC user groups per each CE, for instance: 12_ce_members, 12_admin_members, and those groups are configured to automatically assign the respective KC client roles (ce_member, ce_admin) to all the 3 clients that are defined in KC for the CE 12. Odoo will only need to manage the allocation of each user to the correct KC user group and that's all ( the assignement of the correspondant KC client roles will be automated by KC accordingly with the configuration of those KC user groups)

Edited by Xavier Bonet

Merge request reports