Access Denied to Settings Management for Tenant on 4.3.2 #1424

8 Answer(s)

• 

  0

  learnabp created 3 years ago

  I think it is a bug becuase it is trying to access the Email Settings tab for the tenant and since the tenant doesn't have access to the Email Settings it is giving "Access Denied"

  Save Cancel

  1
• 

  0

  liangshiwei created 3 years ago

  Support Team Fullstack Developer

  HI,

  Can you provide steps to reproduce?

  Save Cancel
• 

  0

  learnabp created 3 years ago

  1. Update tools to 4.3.2
  2. run command abp new Acme.BookStore
  3. Open solution file
  4. Run *.DbMigrator and then run the solution with *.Web project as startup project
  5. Login as admin
  6. Create a Tenant Test
  7. Logout
  8. Switch Tenant to new tenant Test
  9. Try and navigate to settings under Administration menu
  10. You will be redirected to Access Denied Page

  Save Cancel
• 

  0

  liangshiwei created 3 years ago

  Support Team Fullstack Developer

  Thanks. I will check it out.

  Save Cancel
• 

  0

  learnabp created 3 years ago

  i think thia line is cauaing the problem for a tenant becuase the emailsetting should only be avalabile to the hist right ?

  modules/setting-management/src/Volo.Abp.SettingManagement.Web/AbpSettingManagementWebModule.cs

          Configure<RazorPagesOptions>(options =>
          {
              options.Conventions.AuthorizePage("/SettingManagement/Index", SettingManagementPermissions.Emailing);
          });
  

  Save Cancel
• 

  0

  liangshiwei created 3 years ago

  Support Team Fullstack Developer

  This is a bug, I will fixed it. by the way, ticket refunded : )

  Save Cancel
• 

  0

  liangshiwei created 3 years ago

  Support Team Fullstack Developer

  For now, try:

  public override void PostConfigureServices(ServiceConfigurationContext context)
  {
      Configure<RazorPagesOptions>(options =>
      {
          options.Conventions.RemoveAll(x =>
          {
              if (x == null)
              {
                  return false;
              }
              var type = x.GetType();
  
              if (type.Name != "PageApplicationModelConvention")
              {
                  return false;
              }
  
              return type.GetField("_path", BindingFlags.NonPublic | BindingFlags.Instance).GetValue(x)
                  .As<string>() == "/SettingManagement/Index";
          });
      });
  }
  

  Save Cancel

  2
• 

  0

  liangshiwei created 3 years ago

  Support Team Fullstack Developer

  https://github.com/abpframework/abp/pull/9213

  Save Cancel

  1