Custom PermissionValueProvider in microservice project #7924

10 Answer(s)

• 

  0

  liangshiwei created one year ago

  Support Team Fullstack Developer

  Hi,

  They are using RemotePermissionChecker https://github.com/abpframework/abp/blob/rel-8.3/framework/src/Volo.Abp.AspNetCore.Mvc.Client.Common/Volo/Abp/AspNetCore/Mvc/Client/RemotePermissionChecker.cs#L8

  you can override it.

  Save Cancel
• 

  0

  WaelRazouk created one year ago

  Hi, I checked it and couldn't figure out how to get the provider that is granting the required permission, it can only tell if the permission is granted or not. Also the methods are not defined virtual so couldn't override them

  Save Cancel
• 

  0

  liangshiwei created one year ago

  Support Team Fullstack Developer

  Hi,

  after my check,you can use IPermissionManager without any problem

  Save Cancel
• 

  0

  WaelRazouk created one year ago

  I checked it and it works fine in the Api.Host project. How can I use it in the application layer? try to use IPermissionManager in the ProductService.Application project, it will not work directly. There is some dependency I need to add, can you tell what dependency or projects I need to add to make it work?

  Save Cancel
• 

  0

  liangshiwei created one year ago

  Support Team Fullstack Developer

  Hi,

  yes ,you need to add some dependency.

  add Volo.Abp.PermissionManagement.Domain package and module dependency

  Save Cancel
• 

  0

  WaelRazouk created one year ago

  Hi, I resovled package and module dependency, and was able to use IPermissionManager in my service, but faced another issue. I defined new DynamicPermissionManagementProvider extends PermissionManagementProvider and DynamicPermissionValueProvider extends PermissionValueProvider to grant some users some dynamic permissions. I was able to use the new provider and could see the granted permissions in the table AbpPermissionGrants in database. Also logged the result of getting the permission using this line of code:

  var granted = await _permissionManager.GetAsync(RisksManagementServicePermissions.Risks.Default, DynamicPermissionValueProvider.ProviderName, CurrentUser.Id.Value.ToString());
  

  And found that the permission is actually granted to the user using my provider. But from angular side, when sending application-configuration request (which includes in its response auth -> grantedPolicies to tell angular app current users' permissions, I don't see my permission granted!

  Any idea?

  Save Cancel
• 

  0

  liangshiwei created one year ago

  Support Team Fullstack Developer

  Hi,

  But from angular side, when sending application-configuration request (which includes in its response auth -> grantedPolicies to tell angular app current users' permissions, I don't see my permission granted!

  You may need to custom the AbpApplicationConfigurationAppService service https://github.com/abpframework/abp/blob/dev/framework/src/Volo.Abp.AspNetCore.Mvc/Volo/Abp/AspNetCore/Mvc/ApplicationConfigurations/AbpApplicationConfigurationAppService.cs

  Save Cancel
• 

  0

  WaelRazouk created one year ago

  Hi, I managed to make it work without any customization. The issue was that I defined my custom permission provider in another microservice, and the configuration request was redirected to administration service. When I moved the permission provider to administration service, it worked. Now I have a question related to some code that I needed to write:

  To add my provider I needed to write this code

  public override void ConfigureServices(ServiceConfigurationContext context)
  {
      // Other codes
      Configure<PermissionManagementOptions>(options =>
      {
          options.ManagementProviders.Add<DynamicPermissionManagementProvider>();
          options.ProviderPolicies[DynamicPermissionValueProvider.ProviderName] = AdministrationServicePermissions.Dashboard.Host;
      });
  
      Configure<AbpPermissionOptions>(options =>
      {
          options.ValueProviders.Add<DynamicPermissionValueProvider>();
      });
  }
  

  My question is about this line

   options.ProviderPolicies[DynamicPermissionValueProvider.ProviderName] = AdministrationServicePermissions.Dashboard.Host;
  

  Why is this needed? and does it matter what permission I provide for it?

  Save Cancel
• 

  0

  liangshiwei created one year ago

  Support Team Fullstack Developer

  Hi,

  This is used for permission management

  Will check it when using IPermissionAppService to update/change/get permissions

  

  Save Cancel
• 

  0

  WaelRazouk created one year ago

  Hi, Thank you. It's clear now

  Save Cancel