Overview
Capabilities are created from message bus events.
When capability or capability set is created - mod-roles-keycloak
sends application events to the subscriber stream to process the next steps asynchronously:
Populating capabilities and capability sets for loadable roles in reference data
Upgrading keycloak permissions for updated capabilities and capability sets
Loadable Roles event processing
Capability Application Event
Retrieve
permission
fromcapability
Find all
LoadableRoles
with a capability permissionAssign capability to every
CapabilityRole
usingRoleCapabilityService
Capability Set Application Event
Retrieve
permission
fromcapabilitySet
Find all
LoadableRoles
with a capability set permissionAssign capability set to every
CapabilityRole
usingRoleCapabilityService