# abp-authorization

> Claude/Codex skill by [@abpframework](https://omgskills.com/library/abpframework/index.md) · 14k stars · Updated 2026-11-01

ABP permission system - PermissionDefinitionProvider, \[Authorize\] attribute, CheckPolicyAsync, IsGrantedAsync, ICurrentUser, IPermissionManager, multi-tenancy side. Use when working with permissions, authorization, role-based access, or security in ABP projects.

Tags: abp, angular, architecture, aspnet, aspnet-core, aspnetcore, blazor, c-sharp, csharp, domain-driven-design, dotnet-core, framework, modular-monolith, multi-tenancy, saas

## Install

```sh
git clone https://github.com/abpframework/abp /tmp/abp && ln -s /tmp/abp/.claude/skills/abp-authorization ~/.claude/skills/abp-authorization
```

## From README

ABP Authorization Docs: https://abp.io/docs/latest/framework/fundamentals/authorization Permission Definition Define permissions in .Application.Contracts project: Register in provider: Using Permissions Declarative (Attribute) Programmatic Check Allow Anonymous Access Current User Access authenticated user info via CurrentUser property (available in base classes like ApplicationService, DomainService, AbpController): Ownership Validation Multi-Tenancy Permissions Control permission availability per tenant side: Options: MultiTenancySides.Host, Tenant, or Both Feature-Dependent Permissions Permission Management Grant/revoke permissions programmatically: Security Best Practices Never trust client input for user identity Use CurrentUser property (from base class) or inject ICurrentUser Validate ownership in application service methods Filter queries by current user when appropriate Don't expose sensitive fields in DTOs

## Links

- HTML page: https://omgskills.com/library/abpframework/abp/dot-claude/skills/abp-authorization/
- GitHub: https://github.com/abpframework/abp
- Author: [@abpframework](https://omgskills.com/library/abpframework/index.md)

## More from this repo

- [abp-angular](https://omgskills.com/library/abpframework/abp/dot-claude/skills/abp-angular/index.md) — ABP Angular UI patterns - generate-proxy, ListService, PermissionGuard, abpLocalization pipe, ConfirmationService,...
   - [@abpframework](https://omgskills.com/library/abpframework/index.md) · 14k stars
- [abp-app-nolayers](https://omgskills.com/library/abpframework/abp/dot-claude/skills/abp-app-nolayers/index.md) — ABP Single-Layer (No-Layers / nolayers) application template - single project structure, feature-based file...
   - [@abpframework](https://omgskills.com/library/abpframework/index.md) · 14k stars
- [abp-application-layer](https://omgskills.com/library/abpframework/abp/dot-claude/skills/abp-application-layer/index.md) — ABP Application Services, DTOs, CRUD service, object mapping (Mapperly/AutoMapper), validation, error handling.
   - [@abpframework](https://omgskills.com/library/abpframework/index.md) · 14k stars