Open Closed

Bug in permission system of pro modules #6855


User avatar
0
0365-Service created
  • ABP Framework version: v8.0.4
  • UI Type: Angular
  • Database System: EF Core SQL Server
  • Tiered (for MVC) or Auth Server Separated (for Angular): no
  • Exception message and full stack trace:
  • Steps to reproduce the issue:

I created a role called power Users as per below

I added permissions to it: As you can see nothing under identity management was allowed.

When I log in as a user assigned to this role, I can still see most of those menu items?

Please assist, since this is a security risk in the app

Markdown supported.
Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

6 Answer(s)
  • User Avatar
    0
    masum.ulu created
    Angular Expert

    Hi,

    What is the roles current user can you please share Roles tab in Edit User modal ?

    Markdown supported.
    Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)
  • User Avatar
    0
    0365-Service created

    The user has no permissions, yet he can see all the menu items.

    Markdown supported.
    Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)
  • User Avatar
    0
    0365-Service created

    I have just checked. Not a single permission is effective. I have created a user with no permissions, yet he sees everything

    Markdown supported.
    Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)
  • User Avatar
    0
    0365-Service created

    This system is supposed to save time, but i am finding so many issues with stuff that should just work out of the box. I have deadlines to meet and now i have to waste time to figure out why the permission system is not functioning

    Markdown supported.
    Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)
  • User Avatar
    0
    0365-Service created

    Can you please tell me how to troubleshoot this.

    Markdown supported.
    Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)
  • User Avatar
    0
    0365-Service created

    Never mind. I found a work around. Hope it remains working

    Markdown supported.
    Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)
Boost Your Development
ABP Live Training
Packages
See Trainings
Mastering ABP Framework Book
The Official Guide
Mastering
ABP Framework
Learn More
Mastering ABP Framework Book
Made with ❤️ on ABP v10.8.0-preview. Updated on September 21, 2026, 06:18
1
ABP Assistant
🔐 You need to be logged in to use the chatbot. Please log in first.