I have a user that has a role with only Role management -> Create permission (without edit, delete, change permissions) as shown in the picure below.
When I login with this user and go to Identity Management -> Roles page and click on Actions combo, I get an empty list (since user does not have edit, delete, change permissions) as shown in the picture below.
This seems like a bug to users. We expect combo not to open at all if there is no action user can take.
When i granted a permission to the host admin user, the tenant admin users can also acces the granted appservice method.
[Authorize(QueryPermissions.QueryManagement_ExportImport)] public async Task<IActionResult> Export()
but when i remove all the permissions including host admin, then the method is returing 403 as excepected. but this method can be accessible by tenant admins when i remove de tenant admins permissions, but host has permission.
After defining new permission, the permission is granted to the host admin user. Bu t i have 3 tenants and the permission is not granted to these tenant's admin users. When these permissions are granted and why new permission definition is not granted to the tenant admins too.