Request for Role-Based User List Filtering in Identity Management #8724

3 Answer(s)

• 

  0

  EngincanV created one year ago

  Support Team .NET Developer

  Hi, I will create an internal issue for your feature request. Thanks for your suggestion.

  Regards.

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  Payoff created one year ago

  Hi, I'm not looking for this to be added as a feature request - I need to implement this functionality **now ** in my current project. Could you please provide guidance on how to implement role-based filtering for the user list with these specific requirements?

  For non-admin users:

  • Filter out users with admin roles from the list
  • Restrict view/management to non-admin users only

  For admin users:

  • Maintain full visibility of all users
  • Keep all existing management capabilities

  Thank you

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  EngincanV created one year ago

  Support Team .NET Developer

  Hi,
  I'm not looking for this to be added as a feature request - I need to implement this functionality **now ** in my current project. Could you please provide guidance on how to implement role-based filtering for the user list with these specific requirements?

  For non-admin users:

  • Filter out users with admin roles from the list
  • Restrict view/management to non-admin users only

  For admin users:

  • Maintain full visibility of all users
  • Keep all existing management capabilities

  Thank you

  Hi, sure. For that purpose, you should extend application services and interface implementations (https://abp.io/docs/latest/framework/architecture/modularity/extending/customizing-application-modules-overriding-services).

  For example, you should extend the IdentityUserAppService and override some of its methods, such as GetListAsync method and check if the current-user has an admin role or not and then call the relevant repository method (of course you should also create a new repository method for that purpose - maybe you can use custom Data-Filtering):

  [Dependency(ReplaceServices = true)]
  [ExposeServices(typeof(IIdentityUserAppService))]
  public class MyIdentityUserAppService : IIdentityUserAppService, ITransientDependency
  {
      //...
      
      public override async Task<PagedResultDto<IdentityUserDto>> GetListAsync(GetIdentityUsersInput input)
      {
          if(!CurrentUser.IsInRole("admin"))
          {
              //call new repository method which filters to not show the 'admin' users
          }
          
          //keep the existing behaviour
          return await base.GetListAsync(input);    
      }
  }
  
  

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel