abp-authorization

Define and enforce ABP permissions across multi-tenant applications.

1|Updated Mar 20, 2026
One-click install
npx skills add https://github.com/afonsoft/VideoChat --skill abp-authorization-afonsoft
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: abp-authorization
Source: https://github.com/afonsoft/VideoChat/tree/main/.agents/skills/abp-authorization
Command: npx skills add https://github.com/afonsoft/VideoChat --skill abp-authorization-afonsoft

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

ABP-based applications often require fine-grained access control across multi-tenant environments. This skill provides a structured way to define, assign, and enforce permissions using ABP's PermissionDefinitionProvider, [Authorize] attributes, and runtime checks.

Core Features & Use Cases

  • Define permissions in a dedicated PermissionDefinitionProvider to centralize authorization rules.
  • Use declarative [Authorize] attributes to enforce permissions on application services and controllers.
  • Perform runtime checks with CheckPolicyAsync and IsGrantedAsync to guard business logic.
  • Leverage ICurrentUser and IPermissionManager to tailor permissions per tenant and user.
  • Supports multi-tenancy and granular access control across host and tenant boundaries.
  • Use ownership validation and feature-dependent permissions for advanced scenarios.

Quick Start

Configure and register a PermissionDefinitionProvider in your ABP project to define, register, and enforce your permissions across tenants.

Frequently Asked Questions about abp-authorization

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I define and enforce ABP permissions across multi-tenant applications?▼

To define ABP permissions across multi-tenant applications, configure a PermissionDefinitionProvider to centralize rules, use declarative [Authorize] attributes on services, and perform runtime checks with IsGrantedAsync to guard operations.

What is the best way to check permissions dynamically in an ABP Framework project?▼

Checking permissions dynamically in an ABP Framework project is best done using runtime checks. Execute CheckPolicyAsync or IsGrantedAsync within your business logic to verify user-context and enforce granular access control before operations.

Can I use [Authorize] attributes to guard application services in ABP Framework?▼

Yes, you can use declarative [Authorize] attributes to guard application services and controllers in ABP Framework. This enforces role-based access control by ensuring only authorized users access specific operations.

Does ABP support tailoring permissions per tenant using ICurrentUser?▼

Yes, ABP supports tailoring permissions per tenant. Leverage ICurrentUser and IPermissionManager to apply granular access control and ensure secure, role-based permissions across host and tenant boundaries.

How do I manage feature-dependent permissions and ownership validation in ABP?▼

Manage feature-dependent permissions and ownership validation in ABP by combining runtime policy checks with user-context awareness. Use CheckPolicyAsync to validate ownership and grant access only when specific features are enabled.