Open Closed

Bug in permission system of pro modules #6855


User avatar
0
0365-Service created
  • ABP Framework version: v8.0.4
  • UI Type: Angular
  • Database System: EF Core SQL Server
  • Tiered (for MVC) or Auth Server Separated (for Angular): no
  • Exception message and full stack trace:
  • Steps to reproduce the issue:

I created a role called power Users as per below

I added permissions to it: As you can see nothing under identity management was allowed.

When I log in as a user assigned to this role, I can still see most of those menu items?

Please assist, since this is a security risk in the app


6 Answer(s)
  • User Avatar
    0
    masum.ulu created
    Support Team Angular Expert

    Hi,

    What is the roles current user can you please share Roles tab in Edit User modal ?

  • User Avatar
    0
    0365-Service created

    The user has no permissions, yet he can see all the menu items.

  • User Avatar
    0
    0365-Service created

    I have just checked. Not a single permission is effective. I have created a user with no permissions, yet he sees everything

  • User Avatar
    0
    0365-Service created

    This system is supposed to save time, but i am finding so many issues with stuff that should just work out of the box. I have deadlines to meet and now i have to waste time to figure out why the permission system is not functioning

  • User Avatar
    0
    0365-Service created

    Can you please tell me how to troubleshoot this.

  • User Avatar
    0
    0365-Service created

    Never mind. I found a work around. Hope it remains working

Made with ❤️ on ABP v9.1.0-preview. Updated on December 13, 2024, 06:09