I am using openid with an azure AD application. I go through the openid flow and my user is logged in. But I cannot access anything in Atlas but Configuration. (had to do some hacks to get it to work. more info at openid not working with webapi/atlas when using Azure AD application · Issue #1711 · OHDSI/WebAPI (github.com)
Clicking anywhere else I see: “You do not have access to this feature.” Any ideas?
I have a log statement in webapi showing my permissions after I inserted a row in the database for my user that was added during the authentication flow.
2020-12-03 15:52:31.919 INFO http-nio-8080-exec-2 org.ohdsi.webapi.shiro.filters.UpdateAccessTokenFilter - - permissions: [source:daimon:priority:get, user:me:get, source:*:get, user:get, source:details:*:get, comparativecohortanalysis:*:delete, source:*:put, role:*:get, user:import:job:*:delete, user:import:job:get, cohortanalysis:post, role:*:users:*:put, cache:clear:get, source:*:daimons:*:set-priority:post, user:import:*:mapping:post, role:*:users:get, user:import:*:post, user:import:*:mapping:get, source:post, user:providers:get, role:get, user:import:job:*:history:get, user:import:*:groups:get, user:import:job:*:get, source:connection:*:get, role:1:permissions:*:delete, user:import:job:*:put, comparativecohortanalysis:*:put, permission:get, source:*:delete, user:import:job:post, user:runas:post, role:post, role:*:users:*:delete, role:1:permissions:*:put, comparativecohortanalysis:*:copy:get, configuration:edit:ui, role:*:permissions:get, user:import:*:test:get, *:person:*:get:dates, user:import:post]
I’m not sure if I have to set up anything in keycloak or if I have a general error in thinking.