abp-authorization
ABP permission system - PermissionDefinitionProvider, [Authorize] attribute, CheckPolicyAsync, IsGrantedAsync, ICurrentUser, IPermissionManager, multi-tenancy side. Use when working with permissions, authorization, role-based access, or security in ABP projects.
Install
With your agent
Install OMGSkills skill "abpframework/abp:.claude/skills/abp-authorization" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/abpframework/abp /tmp/abp && ln -s /tmp/abp/.claude/skills/abp-authorization ~/.claude/skills/abp-authorizationFrom README
ABP Authorization Docs: https://abp.io/docs/latest/framework/fundamentals/authorization Permission Definition Define permissions in .Application.Contracts project: Register in provider: Using Permissions Declarative (Attribute) Programmatic Check Allow Anonymous Access Current User Access authenticated user info via CurrentUser property (available in base classes like ApplicationService, DomainService, AbpController): Ownership Validation Multi-Tenancy Permissions Control permission availability per tenant side: Options: MultiTenancySides.Host, Tenant, or Both Feature-Dependent Permissions Permission Management Grant/revoke permissions programmatically: Security Best Practices Never trust client input for user identity Use CurrentUser property (from base class) or inject ICurrentUser Validate ownership in application service methods Filter queries by current user when appropriate Don't expose sensitive fields in DTOs
More from this repo
abp-angular
ABP Angular UI patterns - generate-proxy, ListService, PermissionGuard, abpLocalization pipe, ConfirmationService,...
abp-app-nolayers
ABP Single-Layer (No-Layers / nolayers) application template - single project structure, feature-based file...
abp-application-layer
ABP Application Services, DTOs, CRUD service, object mapping (Mapperly/AutoMapper), validation, error handling.