}

    /**
     * Gets a role by its ID.
     * @param id The ID of the role.
     * @return An optional entity of the role.
     */
    public OptionalEntity<Role> getRole(final String id) {
        return roleBhv.selectByPK(id);
    }

    /**
     * Stores a role.
     * @param role The role to store.
     */
    public void store(final Role role) {
        ComponentUtil.getLdapManager().insert(role);

        testUser.setRoleNames(new String[] { "admin", "user", "manager" });
        roles = fessUserBean.getRoles();
        assertEquals(3, roles.length);
        assertEquals("admin", roles[0]);
        assertEquals("user", roles[1]);
        assertEquals("manager", roles[2]);
    }

    public void test_getGroups() {
        // Test with empty groups
        testUser.setGroupNames(new String[] {});

            assertTrue(true);
        } catch (Exception e) {
            assertTrue(true);
        }
    }

    public void test_addElevateWord_noReading() {
        try {
            suggestHelper.addElevateWord("test word", null, new String[] { "tag1" }, new String[] { "role1" }, 1.0f, true);
            assertTrue(true);

            this.groups = groups;
        }

        /**
         * Sets the user's role assignments.
         * @param roles Array of role names.
         */
        public void setRoles(final String[] roles) {
            this.roles = roles;
        }
    }

/**
 * Exception thrown when user role authentication fails during login attempts.
 * This exception is used to indicate that a user does not have the required role
 * to access a specific action or resource.
 *
 */
public class UserRoleLoginException extends RuntimeException {

    private static final long serialVersionUID = 1L;

    /** The action class that requires specific user roles */
    private final Class<?> actionClass;

Shinsuke Sugaya <******@****.***> 1638450896 +0900

    /**
     * Checks if the current user has the specified action role or administrative privileges.
     *
     * @param role the role to check (supports both view and edit variants)
     * @return true if the user has the role or admin privileges, false otherwise
     */
    public static boolean hasActionRole(final String role) {
        final String[] roles;
        if (role.endsWith(FessAdminAction.VIEW)) {

#### Adding 'admin' Role

- Go to Roles
  - Add new Role `admin` with Description `${role_admin}`.
  - Add this Role into compositive role named `default-roles-{realm}` - `{realm}` should be replaced with whatever realm you created from `prerequisites` section. This role is automatically trusted in the 'Service Accounts' tab.

- Check that `account` client_id has the role 'admin' assigned in the "Service Account Roles" tab.

 * Provides access to user name, roles, groups, and permissions.
 */
public interface FessUser extends Serializable {

    /**
     * Gets the user's display name.
     * @return The user's name.
     */
    String getName();

    /**
     * Gets the user's assigned role names.
     * @return Array of role names.
     */
    String[] getRoleNames();

    /**

 */
package org.codelibs.fess.app.web.admin.role;

import org.lastaflute.web.validation.Required;
import org.lastaflute.web.validation.theme.conversion.ValidateTypeFailure;

import jakarta.validation.constraints.Size;

/**
 * Form class for editing user roles in the admin interface.
 * This form extends CreateForm to include fields necessary for updating existing role entries,