Open Closed

Bug in permission system of pro modules #6855


User avatar
0
0365-Service created
  • ABP Framework version: v8.0.4
  • UI Type: Angular
  • Database System: EF Core SQL Server
  • Tiered (for MVC) or Auth Server Separated (for Angular): no
  • Exception message and full stack trace:
  • Steps to reproduce the issue:

I created a role called power Users as per below

I added permissions to it: As you can see nothing under identity management was allowed.

When I log in as a user assigned to this role, I can still see most of those menu items?

Please assist, since this is a security risk in the app


6 Answer(s)
  • User Avatar
    0
    masum.ulu created
    Support Team Angular Expert

    Hi,

    What is the roles current user can you please share Roles tab in Edit User modal ?

  • User Avatar
    0
    0365-Service created

    The user has no permissions, yet he can see all the menu items.

  • User Avatar
    0
    0365-Service created

    I have just checked. Not a single permission is effective. I have created a user with no permissions, yet he sees everything

  • User Avatar
    0
    0365-Service created

    This system is supposed to save time, but i am finding so many issues with stuff that should just work out of the box. I have deadlines to meet and now i have to waste time to figure out why the permission system is not functioning

  • User Avatar
    0
    0365-Service created

    Can you please tell me how to troubleshoot this.

  • User Avatar
    0
    0365-Service created

    Never mind. I found a work around. Hope it remains working

Boost Your Development
ABP Live Training
Packages
See Trainings
Mastering ABP Framework Book
The Official Guide
Mastering
ABP Framework
Learn More
Mastering ABP Framework Book
Made with ❤️ on ABP v10.0.0-preview. Updated on July 11, 2025, 11:35