ABP Authorization Skill

What problem does it solve?

It solves confusion and implementation gaps around authorization in ABP Framework by showing how to define permissions, organize them into groups, and enforce them via policies—including resource-based, instance-level authorization.

Core Features & Use Cases

• Defines permissions and permission groups: Create global permissions using PermissionDefinitionProvider and organize them with groups for a clean UI and consistent policy names.
• Supports advanced permission modeling: Use child permissions for CRUD hierarchies, enable/disable defaults, and add dependencies on features, global features, or custom state checkers.
• Enforces authorization in the right places: Apply authorization in controllers/page models and in application services using AuthorizationService checks and policy requirements.
• Covers resource-based authorization: Explain how to set permissions per resource instance (fine-grained access) and where it’s managed in ABP.

Quick Start

Use the ABP Authorization Skill to implement permission definitions and policy-based authorization for your ABP module, then ask the agent to generate the needed C# permission/provider code and example authorize checks for your controller and app service.