What problem does it solve?
ABP-based applications often require fine-grained access control across multi-tenant environments. This skill provides a structured way to define, assign, and enforce permissions using ABP's PermissionDefinitionProvider, [Authorize] attributes, and runtime checks.
Core Features & Use Cases
- Define permissions in a dedicated PermissionDefinitionProvider to centralize authorization rules.
- Use declarative [Authorize] attributes to enforce permissions on application services and controllers.
- Perform runtime checks with CheckPolicyAsync and IsGrantedAsync to guard business logic.
- Leverage ICurrentUser and IPermissionManager to tailor permissions per tenant and user.
- Supports multi-tenancy and granular access control across host and tenant boundaries.
- Use ownership validation and feature-dependent permissions for advanced scenarios.
Quick Start
Configure and register a PermissionDefinitionProvider in your ABP project to define, register, and enforce your permissions across tenants.