Activities of "gvb"

I updated my project to the latest ABP Version and now nothing is working....

Can not set TenantId to a different value from the current filter parameter value while MayHaveTenant filter is enabled!

How do i remove this filter from ALL the application...?

ISSUE RELATED : <a class="postlink" href="https://github.com/aspnetboilerplate/aspnetboilerplate/issues/476">https://github.com/aspnetboilerplate/as ... issues/476</a>

Doc: <a class="postlink" href="http://aspnetboilerplate.com/Pages/Documents/Data-Filters">http://aspnetboilerplate.com/Pages/Docu ... ta-Filters</a>

The documentation doesn't tell us how to remove forever the IMayHaveTenant filter.... that is pretty useless for almost everyone that doesn't require Tenant part of the framework...

Please do more documentation on Breaking Change release...

i just found this!

It force all page to use HTTPS so it's not about ABP, may be there is other way to do it but here is what i've found finally!!

we need to add this to <system.webServer>

<rewrite>
      <rules>
        <rule name="Force HTTPS" enabled="true">
          <match url="(.*)" ignoreCase="false" />
          <conditions>
            <add input="{HTTPS}" pattern="off" />
          </conditions>
          <action type="Redirect" url="https://{HTTP_HOST}/{R:1}" appendQueryString="true" redirectType="Permanent" />
        </rule>
      </rules>
    </rewrite>

Hey,

I got an SSL certificate, so now I can go to my website with HTTPS and HTTP, but how can I force the use of HTTPS?

thx in advance!

Thanks a lot!

This is the exact place where we modified your code source :)

half of my angular route doesn't require the user to be logged in. that's why i doesn't want to put the AbpMvcAuthorize over my homecontroller

there is no other alternative?

we did some change in the source code but we cannot update the project easily each patch of ABP... and it may broke if you change something core ....

Connected = Logged In! :)

sorry i'm not native english so i'm trying my best ^^

But i did a brainstorming on what you said about the route if the person is not LoggedIn, i shouldn't add the route to AngularJS.

I found this Post about dynamic route in AngularJS <a class="postlink" href="http://stackoverflow.com/questions/13153121/how-to-defer-routes-definition-in-angular-js">http://stackoverflow.com/questions/1315 ... angular-js</a>

So i will protect my route by this when the person log in, i will add route and if he disconnect i will remove route depending on permission and role.

But still the same question remain if the person session end while he is in a page that required to be logged in, i need the WebApi answer to redirect me to login page with my current URL so i get redirected back where i was before log in.

no

What i'm asking for is :

I want to protect my route to redirect to login page if login or any permission is required and the person is not connected. If the person is connected and doesn't have the permission i need to make the person back to the home page.

so mysite.com/#/client/list is a route that need to be connected to access it, but the person can be offline and try to enter this URL. I need abp to catch the exception of no authorization and redirect to the login. (if person is not connected) or if the person is connected and doesnt have the permission redirect him to the home page or page that i can specifie.

i dont know if you understand a bit more now ?

But i like a lot what you said about route, i will protect the route as you said!

But do you know how to add or remove route depending on connection state?

so any idea on how to protect route ? or WebAPI route!?

And how do i control, because if i put the AbpMvcAuthorize, it will ask authentication for all my route ? no ?

mysite.com/#/client/list <-- Require authentication mysite.com/#/news/create <-- Require authentication mysite.com/#/news <-- Doesn't require authentication mysite.com/#/project <-- Doesn't require authentication

Thx for your help, it help a lot ! :)

hmmm it seem's strange to me! because your ModuleZeroSample work as i want ... if i try to access a page that have an AbpAuthorize i got redirected to the Login Page!

Why i dont get this with my AbpAuthorize....

OR how do i protect my page from being accessed by user that he doesn't have access like

mysite.com/#/client/list <--- Required User to be Connected!

in my system you only need to be connected to check the client list, so if u enter the URL manually or save the page in ur favorite, i just want you to be redirected to login page then to the page back when you are connected!

I dont have any Button with an action that appear and shouldn't