[Question] How to bypass permission check in some method in AppService for a Commercial module #1054

yinchang created 4 years ago

ABP Framework version: 4.2.2
UI type: don't care
DB provider: don't care
Tiered (MVC) or Identity Server Separated (Angular): don't care

HI:
I have a question:
When I use FileManagement module,
for execute DownloadAsync method in FileDescriptorAppService
it need FileManagement.FileDescriptor permission,
but I want to let it can be executed without any permission,everyone can use it to download file,
I had already read doc about overriding-a-permission-by-a-custom-policy
but i don't know how to ignore exist policy for a appservice.

Can you tell me how to do? thank you.

maliming created 4 years ago

Support Team Fullstack Developer

You can create a subclass to replace FileDescriptorAppService. And overide DownloadAsync method to use AllowAnonymous attribute.

https://docs.abp.io/en/abp/latest/Customizing-Application-Modules-Overriding-Services

yinchang created 4 years ago

hi

You can create a subclass to replace FileDescriptorAppService. And overide DownloadAsync method to use AllowAnonymous attribute.

https://docs.abp.io/en/abp/latest/Customizing-Application-Modules-Overriding-Services

Hi:
Thank you,It's work