[PR] Rename IAM provisioning roles to admin-rw/admin-ro/user [airavata]

["yasithdev (via GitHub)" <gi...@apache.org>]

yasithdev opened a new pull request, #686:
URL: https://github.com/apache/airavata/pull/686

   Aligns the Keycloak provisioning code with the renamed realm roles. `TenantManagementKeycloakImpl.createDefaultRoles` now defines `admin-rw` / `admin-ro` / `user` (previously `admin` / `admin-read-only` / `gateway-user`), and `createTenantAdminAccount` grants a new gateway admin the `admin-rw` role. This keeps newly-provisioned gateways consistent with the dev realm vocabulary established for the role-based admin authorization work.
   
   No dev runtime change: these paths run only during new-gateway/realm provisioning, not against the seeded dev realm. The dead Thrift-era `KeyCloakSecurityManager` permission matrix still references the old names and is left for separate dead-code removal. Compile verified.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: custos-unsubscribe@airavata.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] Rename IAM provisioning roles to admin-rw/admin-ro/user [airavata]

["yasithdev (via GitHub)" <gi...@apache.org>]

yasithdev merged PR #686:
URL: https://github.com/apache/airavata/pull/686


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: custos-unsubscribe@airavata.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org