Fix role permissions

[dnlkoch]

Description

This is a follow up of #872 and fixes the behaviour for the newly added role mapping by checking against the roles of the shogun Keycloak client (usually shogun-boot) instead of a realm role.

It also removes the listener for the REALM_ROLE events. Replacing it with something like CLIENT_ROLE seems not possible right now since the corresponding event does not contain the id of the new role since it's not created yet.

Please review @terrestris/devs.

Related issues or pull requests

See #872.

Pull request type

• Bugfix
• Feature
• Dependency updates
• Tests
• Code style update (formatting, renaming)
• Refactoring (no functional changes, no api changes)
• Build related changes
• Documentation content changes
• Other (please describe)

Do you introduce a breaking change?

• Yes
• No

Checklist

• I understand and agree that the changes in this PR will be licensed under the
  Apache Licence Version 2.0.
• I have followed the guidelines for contributing.
• The proposed change fits to the content of the code of conduct.
• I have added or updated tests and documentation, and the test suite passes (run mvn test locally).
• I have added a screenshot/screencast to illustrate the visual output of my update.

[dnlkoch]

Thanks for the review!

[github-actions]

🎉 This PR is included in version 20.2.1 🎉

The release is available on:

• v20.2.1
• GitHub release

Your semantic-release bot 📦🚀