Hello everyone!
I want to use keycloak policy enforcer to authorize requests for resources of my app. But, some resources need to have same urls.
In example, there are two roles: user and specialist. With authorization enabled on, i create two resources respectively for users and for specialists. and add two permissions that have role policies applied to them.
But when i do this, request for user give me 403 forbidden, and for specialist 200 status code.
Is it possible to keycloak authorization will check all resources for urls and give access to all users that have permission to it?