)

type SerializerStruct struct {
	gorm.Model
	Name                   []byte                 `gorm:"json"`
	Roles                  Roles                  `gorm:"serializer:json"`
	Roles2                 *Roles                 `gorm:"serializer:json"`
	Roles3                 *Roles                 `gorm:"serializer:json;not null"`
	Contracts              map[string]interface{} `gorm:"serializer:json"`

import org.codelibs.fess.opensearch.user.bsentity.dbmeta.RoleDbm;
import org.codelibs.fess.opensearch.user.cbean.RoleCB;
import org.codelibs.fess.opensearch.user.cbean.ca.RoleCA;
import org.codelibs.fess.opensearch.user.cbean.ca.bs.BsRoleCA;
import org.codelibs.fess.opensearch.user.cbean.cq.RoleCQ;
import org.codelibs.fess.opensearch.user.cbean.cq.bs.BsRoleCQ;
import org.dbflute.cbean.ConditionQuery;

 */
package org.codelibs.fess.opensearch.user.cbean;

import org.codelibs.fess.opensearch.user.cbean.bs.BsRoleCB;

/**
 * @author ESFlute (using FreeGen)
 */
public class RoleCB extends BsRoleCB {

 */
package org.codelibs.fess.opensearch.user.cbean.cq;

import org.codelibs.fess.opensearch.user.cbean.cq.bs.BsRoleCQ;

/**
 * @author ESFlute (using FreeGen)
 */
public class RoleCQ extends BsRoleCQ {

    }

    /**
     * Gets a role by its ID.
     * @param id The ID of the role.
     * @return An optional entity of the role.
     */
    public OptionalEntity<Role> getRole(final String id) {
        return roleBhv.selectByPK(id);
    }

    /**
     * Stores a role.
     * @param role The role to store.
     */
    public void store(final Role role) {
        ComponentUtil.getLdapManager().insert(role);

 */
package org.codelibs.fess.opensearch.user.cbean.ca;

import org.codelibs.fess.opensearch.user.cbean.ca.bs.BsRoleCA;

/**
 * @author ESFlute (using FreeGen)
 */
public class RoleCA extends BsRoleCA {

        RoleCQ cq = new RoleCQ();
        if (queryLambda != null) {
            queryLambda.callback(cq);
        }
        FilterAggregationBuilder builder = regFilterA(name, cq.getQuery());
        if (opLambda != null) {
            opLambda.callback(builder);
        }
        if (aggsLambda != null) {
            RoleCA ca = new RoleCA();
            aggsLambda.callback(ca);

    private User createTestUser(String username, String password) {
        User user = new User();
        user.setName(username);
        user.setPassword(password);
        user.setRoles(new String[] { "role1", "role2" });
        user.setGroups(new String[] { "group1", "group2" });
        return user;
    }

    // Test LdapManager implementation
    private static class TestLdapManager extends LdapManager {

{"index":{"_index":"fess_user.role","_id":"YWRtaW4="}}
{"name":"admin"}
{"index":{"_index":"fess_user.role","_id":"Z3Vlc3Q="}}

#### Adding 'admin' Role

- Go to Roles
  - Add new Role `admin` with Description `${role_admin}`.
  - Add this Role into compositive role named `default-roles-{realm}` - `{realm}` should be replaced with whatever realm you created from `prerequisites` section. This role is automatically trusted in the 'Service Accounts' tab.

- Check that `account` client_id has the role 'admin' assigned in the "Service Account Roles" tab.