abp-authorization

Define and enforce ABP permissions across multi-tenant applications.

1|Updated Mar 20, 2026
One-click install
npx skills add https://github.com/afonsoft/VideoChat --skill abp-authorization-afonsoft
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: abp-authorization
Source: https://github.com/afonsoft/VideoChat/tree/main/.agents/skills/abp-authorization
Command: npx skills add https://github.com/afonsoft/VideoChat --skill abp-authorization-afonsoft

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

ABP-based applications often require fine-grained access control across multi-tenant environments. This skill provides a structured way to define, assign, and enforce permissions using ABP's PermissionDefinitionProvider, [Authorize] attributes, and runtime checks.

Core Features & Use Cases

  • Define permissions in a dedicated PermissionDefinitionProvider to centralize authorization rules.
  • Use declarative [Authorize] attributes to enforce permissions on application services and controllers.
  • Perform runtime checks with CheckPolicyAsync and IsGrantedAsync to guard business logic.
  • Leverage ICurrentUser and IPermissionManager to tailor permissions per tenant and user.
  • Supports multi-tenancy and granular access control across host and tenant boundaries.
  • Use ownership validation and feature-dependent permissions for advanced scenarios.

Quick Start

Configure and register a PermissionDefinitionProvider in your ABP project to define, register, and enforce your permissions across tenants.

Frequently Asked Questions about abp-authorization

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I define and enforce ABP permissions across multi-tenant applications?

To define ABP permissions across multi-tenant applications, configure a PermissionDefinitionProvider to centralize rules, use declarative [Authorize] attributes on services, and perform runtime checks with IsGrantedAsync to guard operations.

What is the best way to check permissions dynamically in an ABP Framework project?

Checking permissions dynamically in an ABP Framework project is best done using runtime checks. Execute CheckPolicyAsync or IsGrantedAsync within your business logic to verify user-context and enforce granular access control before operations.

Can I use [Authorize] attributes to guard application services in ABP Framework?

Yes, you can use declarative [Authorize] attributes to guard application services and controllers in ABP Framework. This enforces role-based access control by ensuring only authorized users access specific operations.

Does ABP support tailoring permissions per tenant using ICurrentUser?

Yes, ABP supports tailoring permissions per tenant. Leverage ICurrentUser and IPermissionManager to apply granular access control and ensure secure, role-based permissions across host and tenant boundaries.

How do I manage feature-dependent permissions and ownership validation in ABP?

Manage feature-dependent permissions and ownership validation in ABP by combining runtime policy checks with user-context awareness. Use CheckPolicyAsync to validate ownership and grant access only when specific features are enabled.