ABP Authorization Skill

Define ABP Framework permissions and map them to ASP.NET Core policies.

13|4|Updated May 27, 2026
One-click install
npx skills add https://github.com/burakdmir/abp-skills --skill abp-authorization-skill
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ABP Authorization Skill
Source: https://github.com/burakdmir/abp-skills/tree/main/claude/abp-authorization
Command: npx skills add https://github.com/burakdmir/abp-skills --skill abp-authorization-skill

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It solves confusion and implementation gaps around authorization in ABP Framework by showing how to define permissions, organize them into groups, and enforce them via policies—including resource-based, instance-level authorization.

Core Features & Use Cases

  • Defines permissions and permission groups: Create global permissions using PermissionDefinitionProvider and organize them with groups for a clean UI and consistent policy names.
  • Supports advanced permission modeling: Use child permissions for CRUD hierarchies, enable/disable defaults, and add dependencies on features, global features, or custom state checkers.
  • Enforces authorization in the right places: Apply authorization in controllers/page models and in application services using AuthorizationService checks and policy requirements.
  • Covers resource-based authorization: Explain how to set permissions per resource instance (fine-grained access) and where it’s managed in ABP.

Quick Start

Use the ABP Authorization Skill to implement permission definitions and policy-based authorization for your ABP module, then ask the agent to generate the needed C# permission/provider code and example authorize checks for your controller and app service.

Frequently Asked Questions about ABP Authorization Skill

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I define permissions in ABP Framework for role-based authorization?

To define permissions in ABP Framework, you use a PermissionDefinitionProvider to register global permissions and organize them into groups for clean UI mapping to ASP.NET Core policies. This establishes the base for role-based authorization checks.

How does resource-based authorization work in ABP Framework for per-instance access control?

Resource-based authorization in ABP Framework enforces per-instance access control by using AuthorizationService checks against specific resource instances. This allows fine-grained permission validation beyond global CRUD operations.

How do I map ABP permissions to ASP.NET Core policies for controller security?

You map ABP permissions to ASP.NET Core policies by defining permission names in the PermissionDefinitionProvider and applying them as policy requirements on controllers and application services for enforcement.

Can I set up hierarchical CRUD permissions and multi-tenancy scoping in ABP?

Yes, ABP supports hierarchical CRUD permissions using child permissions and multi-tenancy scoping. You can enable or disable defaults and add dependencies on features or global features for conditional permission availability.

Where should I enforce ABP authorization checks in my application services?

You should enforce ABP authorization in controllers, page models, and application services using AuthorizationService checks and policy requirements to ensure proper access control before executing business logic.

Why are my ABP permission groups not showing correctly in the role management UI?

Permission groups appear incorrectly when they are not properly organized within the PermissionDefinitionProvider. Defining permissions and grouping them correctly ensures a clean UI and consistent policy names for role management.