Fetch groups from the target user, not the logged in one, fixed the

wronge hard-coded userId, fix addition of roles.

@@ -206,13 +206,20 @@ void updateUser(RealmResource realm, String keycloakClientId, String keycloakUse
 
 
     List<EntityValue> userPermissionList = ec.entity.find('UserPermissionCheck')
     List<EntityValue> userPermissionList = ec.entity.find('UserPermissionCheck')
         .condition('userId', userId)
         .condition('userId', userId)
-        .useCache(true)
+        .useCache(false)
         .disableAuthz()
         .disableAuthz()
         .list()
         .list()
         .filterByDate('groupFromDate', 'groupThruDate', now)
         .filterByDate('groupFromDate', 'groupThruDate', now)
         .filterByDate('permissionFromDate', 'permissionThruDate', now)
         .filterByDate('permissionFromDate', 'permissionThruDate', now)
     List<String> moquiPermissions = userPermisionList*.userPermissionId.collect { permission -> 'permission:' + permission }
     List<String> moquiPermissions = userPermisionList*.userPermissionId.collect { permission -> 'permission:' + permission }
-    List<String> moquiGroups = ec.user.userGroupIdSet.collect { group -> 'group:' + group }
+    List<EntityValue> userGroupList = ec.entity.find('UserGroupMemberUser')
+        .condition('userId', userId)
+        .useCache(false)
+        .disableAuthz()
+        .list()
+        .filterByDate('fromDate', 'thruDate', now)
+    Set<String> moquiGroups = userGroupList*.userGroupId.collect { group -> 'group:' + group }
+    moquiGroups.add('group:ALL_USERS')
 
 
     Map<String, RoleRepresentation> wantedClientRoles = getClientRoles(realm, clientResource, moquiPermissions + moquiGroups)
     Map<String, RoleRepresentation> wantedClientRoles = getClientRoles(realm, clientResource, moquiPermissions + moquiGroups)
 
 
@@ -225,6 +232,7 @@ void updateUser(RealmResource realm, String keycloakClientId, String keycloakUse
     logger.info("user[$userId]} attributes: " + attributes)
     logger.info("user[$userId]} attributes: " + attributes)
     userRep.setAttributes(attributes)
     userRep.setAttributes(attributes)
 
 
+    List<RoleRepresentation> toRemove = []
     RoleMappingResource roleMappingResource = userResource.roles()
     RoleMappingResource roleMappingResource = userResource.roles()
     ClientMappingsRepresentation clientMappingsRespresentation = roleMappingResource.getAll().getClientMappings()[keycloakClientId]
     ClientMappingsRepresentation clientMappingsRespresentation = roleMappingResource.getAll().getClientMappings()[keycloakClientId]
     for (RoleRepresentation existingRoleRep: clientMappingsRespresentation.getMappings()) {
     for (RoleRepresentation existingRoleRep: clientMappingsRespresentation.getMappings()) {
@@ -232,11 +240,16 @@ void updateUser(RealmResource realm, String keycloakClientId, String keycloakUse
             toRemove.add(existingRoleRep)
             toRemove.add(existingRoleRep)
         }
         }
     }
     }
+    List<RoleRepresentation> toAdd = wantedClientRoles.values() as List
+    logger.info("roles to remove: ${toRemove}")
+    logger.info("roles to add: ${toAdd}")
     RoleScopeResource clientRoleScopeResource = roleMappingResource.clientLevel(clientId)
     RoleScopeResource clientRoleScopeResource = roleMappingResource.clientLevel(clientId)
     clientRoleScopeResource.remove(toRemove)
     clientRoleScopeResource.remove(toRemove)
-    clientRoleScopeResource.add(wantedClientRoles.values() as List)
+    clientRoleScopeResource.add(toAdd)
 
 
     userResource.update(userRep)
     userResource.update(userRep)
+    Map<String, Object> foo = userResource.impersonate()
+    logger.info("impersonate: foo=${foo}")
 }
 }
 
 
 
 
@@ -279,7 +292,8 @@ Map<String, Object> getKeycloakUsers() {
             logger.info('keycloak user: ' + keycloakToJson(user))
             logger.info('keycloak user: ' + keycloakToJson(user))
         }
         }
 */
 */
-        updateUser(realm, keycloakClientId, 'c6a4cb53-4533-4236-89e5-058967b9b90a', '100000')
+        updateUser(realm, keycloakClientId, 'c6a4cb53-4533-4236-89e5-058967b9b90a', '100003')
+        logger.info("access token=${keycloakToJson(keycloak.tokenManager().getAccessToken())}")
 
 
     } finally {
     } finally {
         keycloak.close()
         keycloak.close()