Read Only Access of a realm clients' Authz is broken for Admin Console

[SalemWafi]

Before reporting an issue

• I have read and understood the above terms for submitting issues, and I understand that my issue may be closed without action if I do not follow them.

Area

admin/ui

Describe the bug

Users in the master realm who have view-authorization role of a sub realm can't see the "Authorization" tab of the clients (that has authorization enabled) of that sub realm.

Version

22.0.3

Expected behavior

Users in the master realm who have view-authorization role of a sub realm should be able to see the "Authorization" tab of the clients (that have authorization enabled) of that sub realm.

Actual behavior

Users in the master realm who have view-authorization role of a sub realm can't see the "Authorization" tab of the clients (that has authorization enabled) of that sub realm.

How to Reproduce?

1. Create a User in the master realm and assign these roles to that user (Make sure to assign your sub realm view-authorization role to that user).

2. Login/impersonate that user, then go to your sub realm clients and click on one of the clients in that realm that has Authorization enabled.
   You won't be able to see the "Authorization" tab even tho that you have the role view-authorization of that sub realm:

Anything else?

If I assign the sub realm manage-authorization role to that user, the "Authorization" tab shows up, but of course, the user will have write access to the Authorizations tab, which is not a desirable solution for read-only users.

[ssilvert]

I have verified this bug.

[SalemWafi]

Hi @hmlnarik

Since you took this issue, this info might be helpful for you:

I think I have already found the cause of this bug.

The check for "view-authorization" is missing in this line of code: code_line_link
as you see the line "{client!.authorizationServicesEnabled && hasManageAuthorization && ("
should be instead "{client!.authorizationServicesEnabled && (hasManageAuthorization || hasViewAuthorization) && ("
where: "const hasViewAuthoriztion= hasAccess("view-authorization");"

CC: @ssilvert

[SalemWafi]

@hmlnarik I found a related issue, in case you have some spare time to work on it :)
Thanks in advance!!

#25054
debugged_code_link