Draft: TEST unique realm scenario
This branch is a TEST environment to check the scenario with a UNIQUE realm in KC instead have one realm per CE.
It means that for each CE we need to have a KC CLIENT entity into this unique realm.
In fact we probably we will need to have 3 KC clients per CE: odoo
, ov_back
, ov_front
.
In addition, in order to identify the KC clients that belongs to different CE's, we need to add (for example) a PREFIX to the name of each CK client mapped to the unique ID of each CE (id of the Odoo res_company record), for instance: 12_odoo
and 12_ov_front
will be the KC client for Odoo and ov_front related to the CE that have the ID = 12.
WIP: The roles
(ce_member, ce_admin, ...) of each user must be 'moved' at KC-client level, instead at KC-realm level. To do that we will implement the KC client_roles
functionality. In order to assign those KC 'client_roles' we create several KC user groups
per each CE, for instance: 12_ce_members
, 12_admin_members
, and those groups are configured to automatically assign the respective KC client roles
(ce_member, ce_admin) to all the 3 clients that are defined in KC for the CE 12. Odoo will only need to manage the allocation of each user to the correct KC user group
and that's all ( the assignement of the correspondant KC client roles
will be automated by KC accordingly with the configuration of those KC user groups
)