Access Denied to Settings Management for Tenant on 4.3.2 #1424

8 Answer(s)

• 

  0

  learnabp created 5 years ago

  I think it is a bug becuase it is trying to access the Email Settings tab for the tenant and since the tenant doesn't have access to the Email Settings it is giving "Access Denied"

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel

  1
• 

  0

  liangshiwei created 5 years ago

  Fullstack Developer

  HI,

  Can you provide steps to reproduce?

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  learnabp created 5 years ago

  1. Update tools to 4.3.2
  2. run command abp new Acme.BookStore
  3. Open solution file
  4. Run *.DbMigrator and then run the solution with *.Web project as startup project
  5. Login as admin
  6. Create a Tenant Test
  7. Logout
  8. Switch Tenant to new tenant Test
  9. Try and navigate to settings under Administration menu
  10. You will be redirected to Access Denied Page

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  liangshiwei created 5 years ago

  Fullstack Developer

  Thanks. I will check it out.

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  learnabp created 5 years ago

  i think thia line is cauaing the problem for a tenant becuase the emailsetting should only be avalabile to the hist right ?

  modules/setting-management/src/Volo.Abp.SettingManagement.Web/AbpSettingManagementWebModule.cs

          Configure<RazorPagesOptions>(options =>
          {
              options.Conventions.AuthorizePage("/SettingManagement/Index", SettingManagementPermissions.Emailing);
          });
  

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  liangshiwei created 5 years ago

  Fullstack Developer

  This is a bug, I will fixed it. by the way, ticket refunded : )

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  liangshiwei created 5 years ago

  Fullstack Developer

  For now, try:

  public override void PostConfigureServices(ServiceConfigurationContext context)
  {
      Configure<RazorPagesOptions>(options =>
      {
          options.Conventions.RemoveAll(x =>
          {
              if (x == null)
              {
                  return false;
              }
              var type = x.GetType();
  
              if (type.Name != "PageApplicationModelConvention")
              {
                  return false;
              }
  
              return type.GetField("_path", BindingFlags.NonPublic | BindingFlags.Instance).GetValue(x)
                  .As<string>() == "/SettingManagement/Index";
          });
      });
  }
  

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel

  2
• 

  0

  liangshiwei created 5 years ago

  Fullstack Developer

  https://github.com/abpframework/abp/pull/9213

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel

  1