Activities of "safak.bal"
after migration to v3.2 when your browser default language is turkish, application is opening in turkish language selection even if the default language is english
and also when it comes with turkish culture, after you log in datepickers are not workinf properly and console logs this error. "ERROR Error: Uncaught (in promise): Error: InvalidPipeArgument: 'Missing locale data for the locale "tr".' for pipe 't'" but if you click "English" and then click "Türkçe" again it works correctly.
I created a demo , http://9d7c0e1ede1ff59d.demo.commercial.abp.io/dashboard , and the error occurs there also.
that error occurs in "Genel Görünüm" page. I opened the tab in Incognito mode and entered this demo address, after pressing "Genel Görünüm" page this error is thrown in console
http://9d7c0e1ede1ff59d.demo.commercial.abp.io/dashboard enter directly this address, and route dashboard from login you will see the error, and also the start and end date datepickers are not working.
when will this bug and default langueage bug be fixed?
- ABP Framework version: v4.0.0
- UI type: Angular
- DB provider: EF Core
- Tiered (MVC) or Identity Server Separated (Angular): yes
- Steps to reproduce the issue:
After defining new permission, the permission is granted to the host admin user. Bu t i have 3 tenants and the permission is not granted to these tenant's admin users. When these permissions are granted and why new permission definition is not granted to the tenant admins too.
- ABP Framework version: v4.0.0
- UI type: Angular
- DB provider: EF Core
- Tiered (MVC) or Identity Server Separated (Angular): yes
- Steps to reproduce the issue:
When i granted a permission to the host admin user, the tenant admin users can also acces the granted appservice method.
[Authorize(QueryPermissions.QueryManagement_ExportImport)] public async Task<IActionResult> Export()
but when i remove all the permissions including host admin, then the method is returing 403 as excepected. but this method can be accessible by tenant admins when i remove de tenant admins permissions, but host has permission.
Permission Definition: queryManagement.AddChild(QueryPermissions.QueryManagement_ExportImport, LocalizationHelper.L("Permission:QueryManagement:ExportImport"));
follow this steps:
- Add one or more tenants
- Add the permission definition
- Run DBMigrator
- Check the AbpPermissionGrants table and see only the Null TenantId is added and no tenant admin row is added
But i tested this; after adding the permission , if you add the tenant after the permission definition then everyting works fine
Permission Definition: queryManagement.AddChild(QueryPermissions.QueryManagement_ExportImport, localizationHelper.L("Permission:QueryManagement:ExportImport"));
AppService Method Authorization [Authorize(QueryPermissions.QueryManagement_ExportImport)] public async Task<IActionResult> Export()
Steps to repro:
- Add one or more tenants
- Give the permission to host , and remove from the tenant
- Get token with tenant admin and make request to the Export method and get 200 result code ( this must be 403 but returns 200)
- Remove the permission from host admin, get new token with tenant admin and make request to Export method and get 403 result code
As a result, when permission is granted to the host admin, all tenant admins without permission access the resource
In which document this is explained? i cannot see. Our migrationservice is still in fthe form of the first version. We need to change there like your example.
Host admin token { "nbf": 1620373769, "exp": 1651909769, "iss": "/ca-identity", "aud": "CA", "client_id": "CA_App", "sub": "c078ca72-4869-5383-7919-39fb0586c555", "auth_time": 1620373762, "idp": "local", "role": "admin", "phone_number_verified": "False", "email": "admin@abp.io", "email_verified": "False", "name": "admin", "sid": "2772ED5FA9773ADB01C8DCDF6B6E44D2", "iat": 1620373769, "scope": [ "openid", "CA", "offline_access" ], "amr": [ "pwd" ] }
Tenant admin token
{ "nbf": 1620373904, "exp": 1651909904, "iss": "/ca-identity", "aud": "CA", "client_id": "CA_App", "sub": "1f1207be-c392-3215-258e-39fb05868f66", "auth_time": 1620373896, "idp": "local", "tenantid": "0748e09a-d518-92fb-df3a-39fb058627cc", "role": "admin", "phone_number_verified": "False", "email": "admin@default-tenant.com", "email_verified": "False", "name": "admin", "sid": "AB62428E55B0BFB174AFD6FB1B8DBDCE", "iat": 1620373904, "scope": [ "openid", "CA", "offline_access" ], "amr": [ "pwd" ] }
is there a problem? when host admin has the permission the tenant token also making request and getting 200, but when i remove the permission from host admin role than bot tokens getting 403
Hi, i am sure using correct tokens, which i sent you the claims