Base solution for your next web application
Open Closed

Edition and Tenant admin user permission question #1972


User avatar
0
andry3ag created

When I make new edition with limited feature, and attach it to new tenant, after created tenant with default admin user, and login by this admin user to new tenant, the admin user has full feature of the default tenant. e.g. default tenant has feature 1,2,3,4,5 new edition has feature 4,5, assign it to new tenant-1, then tenant-1 admin user has feature 1,2,3,4,5 and tenant-1 admin can create an new user under tenant-1, and assign any feature to this user, not limited by new edition feature.


7 Answer(s)
  • User Avatar
    0
    hikalkan created
    Support Team

    Hi,

    I suppose you confused about features and permissions. You can not assign fetures to users, but can assign permissions. If you have a permission (related to a feature) and assigned it to a user. This permission will not be actually granted if related feature is disabled. If I misunderstood it, please explain again :)

  • User Avatar
    0
    andry3ag created

    Thank you for your response.

    My question is for Edition. if Edition-1 only has feature Role, OU, but its admin user has permission can see Dashboard, Role, OU ... all of them How I can control edition feature. Likes Edition-1 only has Role, OU, and Edition-1 cannot see Dashboard. Then when I create tenant-1 assigned by Editio-1, all user belong tenant-1 has permission Role, OU, cannot choice Dashboard. What is mean your Edition?

    Thanks,

  • User Avatar
    0
    ismcagdas created
    Support Team

    Hi,

    Can you send an example screenshot of setting Feature/Permission (I'm also a bit confused :)) dialog. We will be able to answer your question more accurate.

  • User Avatar
    0
    andry3ag created

    step 1) goto create new Edition called BasicEdition step 2) edit its featue, choice Chat (Administration is not checked) step 3) goto create new tenant called BasicTenant step 4) assign BasicEdition to BasicTenant step 5) login by admin user of BasicTenant step 6) BasicTenant/Adminuser still can see Administration permissions This is my question why the unchecked Administration feature is in BasicEdition->BasicTenant/admin user?

    e.g. if we have the feature called "make invoice", it is not included in BasicEdition, when I login the BasicEdition by its BasicTenant/admin user, I still can see "make invoice" in the permission.

    if we don't have "make invoice" feature, why we can setup its permission. If enable "make invoice", the "make invoice" feature is enable in BasicEdition->BasicTenant

    Hope my explain is clear.

  • User Avatar
    0
    ismcagdas created
    Support Team

    Hi,

    Thank you, it's very clear for me. Can you check the version of EntityFramework.DynamicFilters library in your project ? If it's higher than v1.4.11, it causes this problem.

    You can upgrade to latest ABP v1.1.1 and when doing that, you need to downgrade to EntityFramework.DynamicFilters v1.4.11.

    See <a class="postlink" href="https://github.com/aspnetboilerplate/aspnetboilerplate/issues/1451">https://github.com/aspnetboilerplate/as ... ssues/1451</a>

  • User Avatar
    0
    andry3ag created

    EntityFramework.DynamicFilters is v1.4.11.0 in my project.

  • User Avatar
    0
    ismcagdas created
    Support Team

    Hi,

    So it seems like it's not related to EntityFramework.DynamicFilters. If you can send your project to <a href="mailto:[email protected]">[email protected]</a>, we can take a look at it.