Nov 7, 2025 · Nov 10, 2025 · Nov 10, 2025 · Nov 10, 2025 · Nov 10, 2025 · Nov 10, 2025
diff --git a/...ion.Abstractions/Volo/Abp/Authorization/Permissions/Resources/IResourcePermissionStore.cs b/...ion.Abstractions/Volo/Abp/Authorization/Permissions/Resources/IResourcePermissionStore.cs
    /// <param name="name">The name of the permission.</param>
    /// <param name="resourceName">The name of the resource.</param>
    /// <param name="resourceKey">Resource key</param>
    /// <param name="providerName">The name of the provider.</param>
    /// <param name="providerKey">The key of the provider.</param>
    /// <returns>
    /// True if the permission is granted.
    /// </returns>
    Task<bool> IsGrantedAsync(
        string name,
        string resourceName,
        string resourceKey
        string resourceKey,
        string providerName,
        string providerKey
    );

    /// <summary>
    /// Checks if the given permissions are granted for the given resource.
    /// </summary>
    /// <param name="names">The name of the permissions.</param>
    /// <param name="resourceName">The name of the resource.</param>
    /// <param name="resourceKey">Resource key</param>
    /// <param name="providerName">The name of the provider.</param>
    /// <param name="providerKey">The key of the provider.</param>
    /// <returns>
    /// A <see cref="MultiplePermissionGrantResult"/> object containing the grant results for each permission.
    /// </returns>
    Task<MultiplePermissionGrantResult> IsGrantedAsync(
        string[] names,
        string resourceName,
        string resourceKey
        string resourceKey,
        string providerName,
        string providerKey
    );

    /// <summary>
diff --git a/....Abstractions/Volo/Abp/Authorization/Permissions/Resources/NullResourcePermissionStore.cs b/....Abstractions/Volo/Abp/Authorization/Permissions/Resources/NullResourcePermissionStore.cs
        Logger = NullLogger<NullResourcePermissionStore>.Instance;
    }

    public Task<bool> IsGrantedAsync(string name, string resourceName, string resourceKey)
    public Task<bool> IsGrantedAsync(string name, string resourceName, string resourceKey, string providerName, string providerKey)
    {
        return TaskCache.FalseResult;
    }

    public Task<MultiplePermissionGrantResult> IsGrantedAsync(string[] names, string resourceName, string resourceKey)
    public Task<MultiplePermissionGrantResult> IsGrantedAsync(string[] names, string resourceName, string resourceKey, string providerName, string providerKey)
    {
        return Task.FromResult(new MultiplePermissionGrantResult(names, PermissionGrantResult.Prohibited));
    }
diff --git a/...actions/Volo/Abp/Authorization/Permissions/Resources/ResourcePermissionStoreExtensions.cs b/...actions/Volo/Abp/Authorization/Permissions/Resources/ResourcePermissionStoreExtensions.cs
    /// Checks if a specific permission is granted for a resource with a given key.
    /// </summary>
    /// <typeparam name="TResource">The type of the resource.</typeparam>
    /// <param name="resourcePermissionStore">The resource permission checker instance.</param>
    /// <param name="resourcePermissionChecker">The resource permission checker instance.</param>
    /// <param name="permissionName">The name of the permission to check.</param>
    /// <param name="resource">The resource instance to check permission for.</param>
    /// <param name="resourceKey">The unique key identifying the resource instance.</param>
    /// <returns>A task that represents the asynchronous operation. The task result contains a boolean value indicating whether the permission is granted.</returns>
    public static Task<bool> IsGrantedAsync<TResource>(
        thisIResourcePermissionStore resourcePermissionStore,
        thisIResourcePermissionChecker resourcePermissionChecker,
        string permissionName,
        TResource resource,
        object resourceKey
    )
    {
        Check.NotNull(resourcePermissionStore, nameof(resourcePermissionStore));
        Check.NotNull(resourcePermissionChecker, nameof(resourcePermissionChecker));
        Check.NotNullOrWhiteSpace(permissionName, nameof(permissionName));
        Check.NotNull(resource, nameof(resource));
        Check.NotNull(resourceKey, nameof(resourceKey));

        returnresourcePermissionStore.IsGrantedAsync(
        returnresourcePermissionChecker.IsGrantedAsync(
            permissionName,
            typeof(TResource).FullName!,
            resourceKey.ToString()!
    /// Retrieves a dictionary of permissions and their granted statuses for a specific resource.
    /// </summary>
    /// <typeparam name="TResource">The type of the resource.</typeparam>
    /// <param name="resourcePermissionStore">The resource permission checker instance.</param>
    /// <param name="resourcePermissionChecker">The resource permission checker instance.</param>
    /// <param name="resource">The resource instance for which permissions are being checked.</param>
    /// <param name="resourceKey">The unique key identifying the resource instance.</param>
    /// <returns>A task that represents the asynchronous operation. The task result contains a dictionary where keys are permission names and values indicate whether the corresponding permission is granted.</returns>
    public static Task<IDictionary<string, bool>> GetPermissionsAsync<TResource>(
        thisIResourcePermissionStore resourcePermissionStore,
        thisIResourcePermissionChecker resourcePermissionChecker,
        TResource resource,
        object resourceKey
    )
    {
        Check.NotNull(resourcePermissionStore, nameof(resourcePermissionStore));
        Check.NotNull(resourcePermissionChecker, nameof(resourcePermissionChecker));
        Check.NotNull(resource, nameof(resource));
        Check.NotNull(resourceKey, nameof(resourceKey));

        returnresourcePermissionStore.GetPermissionsAsync(
        returnresourcePermissionChecker.GetPermissionsAsync(
            typeof(TResource).FullName!,
            resourceKey.ToString()!
        );
diff --git a/...ation/Volo/Abp/Authorization/Permissions/Resources/RoleResourcePermissionValueProvider.cs b/...ation/Volo/Abp/Authorization/Permissions/Resources/RoleResourcePermissionValueProvider.cs

        foreach (var role in roles.Distinct())
        {
            if (await ResourcePermissionStore.IsGrantedAsync(context.Permission.Name, Name, role))
            if (await ResourcePermissionStore.IsGrantedAsync(context.Permission.Name,context.ResourceName, context.ResourceKey,Name, role))
            {
                return PermissionGrantResult.Granted;
            }

        foreach (var role in roles.Distinct())
        {
            var multipleResult = await ResourcePermissionStore.IsGrantedAsync(permissionNames.ToArray(), Name, role);
            var multipleResult = await ResourcePermissionStore.IsGrantedAsync(permissionNames.ToArray(),context.ResourceName, context.ResourceKey,Name, role);

            foreach (var grantResult in multipleResult.Result.Where(grantResult =>
                result.Result.ContainsKey(grantResult.Key) &&
diff --git a/...ation/Volo/Abp/Authorization/Permissions/Resources/UserResourcePermissionValueProvider.cs b/...ation/Volo/Abp/Authorization/Permissions/Resources/UserResourcePermissionValueProvider.cs
            return PermissionGrantResult.Undefined;
        }

        return await ResourcePermissionStore.IsGrantedAsync(context.Permission.Name, Name, userId)
        return await ResourcePermissionStore.IsGrantedAsync(context.Permission.Name,context.ResourceName, context.ResourceKey,Name, userId)
            ? PermissionGrantResult.Granted
            : PermissionGrantResult.Undefined;
    }
            return new MultiplePermissionGrantResult(permissionNames);
        }

        return await ResourcePermissionStore.IsGrantedAsync(permissionNames, Name, userId);
        return await ResourcePermissionStore.IsGrantedAsync(permissionNames,context.ResourceName, context.ResourceKey,Name, userId);
    }
 }
diff --git a/...n/Volo/Abp/Authorization/Permissions/Resources/EntityResourcePermissionStoreExtensions.cs b/...n/Volo/Abp/Authorization/Permissions/Resources/EntityResourcePermissionStoreExtensions.cs
    /// Checks if the specified permission is granted for the given entity.
    /// </summary>
    /// <typeparam name="TEntity">The type of the entity.</typeparam>
    /// <param name="resourcePermissionStore">The resource permission checker instance.</param>
    /// <param name="resourcePermissionChecker">The resource permission checker instance.</param>
    /// <param name="permissionName">The name of the permission to check.</param>
    /// <param name="entity">The entity for which the permission is being checked.</param>
    /// <returns>A task that represents the asynchronous operation. The task result is a boolean indicating whether the permission is granted.</returns>
    public static Task<bool> IsGrantedAsync<TEntity>(
        thisIResourcePermissionStore resourcePermissionStore,
        thisIResourcePermissionChecker resourcePermissionChecker,
        string permissionName,
        TEntity entity
    )
        where TEntity : class, IEntity
    {
        Check.NotNull(resourcePermissionStore, nameof(resourcePermissionStore));
        Check.NotNull(resourcePermissionChecker, nameof(resourcePermissionChecker));
        Check.NotNullOrWhiteSpace(permissionName, nameof(permissionName));
        Check.NotNull(entity, nameof(entity));

        returnresourcePermissionStore.IsGrantedAsync(
        returnresourcePermissionChecker.IsGrantedAsync(
            permissionName,
            typeof(TEntity).FullName!,
            entity.GetKeys().JoinAsString(",")
    /// Retrieves a dictionary of permissions and their granted status for the specified entity.
    /// </summary>
    /// <typeparam name="TEntity">The type of the entity.</typeparam>
    /// <param name="resourcePermissionStore">The resource permission checker instance.</param>
    /// <param name="resourcePermissionChecker">The resource permission checker instance.</param>
    /// <param name="entity">The entity for which the permissions are being retrieved.</param>
    /// <returns>A dictionary where the keys are permission names and the values are booleans indicating whether the permission is granted.</returns>
    public static Task<IDictionary<string, bool>> GetPermissionsAsync<TEntity>(
        thisIResourcePermissionStore resourcePermissionStore,
        thisIResourcePermissionChecker resourcePermissionChecker,
        TEntity entity
    )
        where TEntity : class, IEntity
    {
        Check.NotNull(resourcePermissionStore, nameof(resourcePermissionStore));
        Check.NotNull(resourcePermissionChecker, nameof(resourcePermissionChecker));
        Check.NotNull(entity, nameof(entity));

        returnresourcePermissionStore.GetPermissionsAsync(
        returnresourcePermissionChecker.GetPermissionsAsync(
            typeof(TEntity).FullName!,
            entity.GetKeys().JoinAsString(",")
        );
diff --git a/framework/src/Volo.Abp.Ddd.Domain/Volo/Abp/Domain/AbpDddDomainModule.cs b/framework/src/Volo.Abp.Ddd.Domain/Volo/Abp/Domain/AbpDddDomainModule.cs
        context.Services.AddConventionalRegistrar(new AbpRepositoryConventionalRegistrar());
        context.Services.OnRegistered(ChangeTrackingInterceptorRegistrar.RegisterIfNeeded);
    }

    public override void ConfigureServices(ServiceConfigurationContext context)
    {
        context.Services.AddEntityResourcePermissionAuthorization();
    }
 }
Original file line number	Diff line number	Diff line change
Expand Up		@@ -11,19 +11,36 @@ public interface IResourcePermissionStore
		/// <param name="name">The name of the permission.</param>
		/// <param name="resourceName">The name of the resource.</param>
		/// <param name="resourceKey">Resource key</param>
		/// <param name="providerName">The name of the provider.</param>
		/// <param name="providerKey">The key of the provider.</param>
		/// <returns>
		/// True if the permission is granted.
		/// </returns>
		Task<bool> IsGrantedAsync(
		string name,
		string resourceName,
		string resourceKey
		string resourceKey,
		string providerName,
		string providerKey
		);

		/// <summary>
		/// Checks if the given permissions are granted for the given resource.
		/// </summary>
		/// <param name="names">The name of the permissions.</param>
		/// <param name="resourceName">The name of the resource.</param>
		/// <param name="resourceKey">Resource key</param>
		/// <param name="providerName">The name of the provider.</param>
		/// <param name="providerKey">The key of the provider.</param>
		/// <returns>
		/// A <see cref="MultiplePermissionGrantResult"/> object containing the grant results for each permission.
		/// </returns>
		Task<MultiplePermissionGrantResult> IsGrantedAsync(
		string[] names,
		string resourceName,
		string resourceKey
		string resourceKey,
		string providerName,
		string providerKey
		);

		/// <summary>
Expand Down
Original file line number	Diff line number	Diff line change
Expand Up		@@ -17,12 +17,12 @@ public NullResourcePermissionStore()
		Logger = NullLogger<NullResourcePermissionStore>.Instance;
		}

		public Task<bool> IsGrantedAsync(string name, string resourceName, string resourceKey)
		public Task<bool> IsGrantedAsync(string name, string resourceName, string resourceKey, string providerName, string providerKey)
		{
		return TaskCache.FalseResult;
		}

		public Task<MultiplePermissionGrantResult> IsGrantedAsync(string[] names, string resourceName, string resourceKey)
		public Task<MultiplePermissionGrantResult> IsGrantedAsync(string[] names, string resourceName, string resourceKey, string providerName, string providerKey)
		{
		return Task.FromResult(new MultiplePermissionGrantResult(names, PermissionGrantResult.Prohibited));
		}
Expand Down
Original file line number	Diff line number	Diff line change
Expand Up		@@ -9,24 +9,24 @@ public static class ResourcePermissionStoreExtensions
		/// Checks if a specific permission is granted for a resource with a given key.
		/// </summary>
		/// <typeparam name="TResource">The type of the resource.</typeparam>
		/// <param name="resourcePermissionStore">The resource permission checker instance.</param>
		/// <param name="resourcePermissionChecker">The resource permission checker instance.</param>
		/// <param name="permissionName">The name of the permission to check.</param>
		/// <param name="resource">The resource instance to check permission for.</param>
		/// <param name="resourceKey">The unique key identifying the resource instance.</param>
		/// <returns>A task that represents the asynchronous operation. The task result contains a boolean value indicating whether the permission is granted.</returns>
		public static Task<bool> IsGrantedAsync<TResource>(
		thisIResourcePermissionStore resourcePermissionStore,
		thisIResourcePermissionChecker resourcePermissionChecker,
		string permissionName,
		TResource resource,
		object resourceKey
		)
		{
		Check.NotNull(resourcePermissionStore, nameof(resourcePermissionStore));
		Check.NotNull(resourcePermissionChecker, nameof(resourcePermissionChecker));
		Check.NotNullOrWhiteSpace(permissionName, nameof(permissionName));
		Check.NotNull(resource, nameof(resource));
		Check.NotNull(resourceKey, nameof(resourceKey));

		returnresourcePermissionStore.IsGrantedAsync(
		returnresourcePermissionChecker.IsGrantedAsync(
		permissionName,
		typeof(TResource).FullName!,
		resourceKey.ToString()!
Expand All		@@ -37,21 +37,21 @@ object resourceKey
		/// Retrieves a dictionary of permissions and their granted statuses for a specific resource.
		/// </summary>
		/// <typeparam name="TResource">The type of the resource.</typeparam>
		/// <param name="resourcePermissionStore">The resource permission checker instance.</param>
		/// <param name="resourcePermissionChecker">The resource permission checker instance.</param>
		/// <param name="resource">The resource instance for which permissions are being checked.</param>
		/// <param name="resourceKey">The unique key identifying the resource instance.</param>
		/// <returns>A task that represents the asynchronous operation. The task result contains a dictionary where keys are permission names and values indicate whether the corresponding permission is granted.</returns>
		public static Task<IDictionary<string, bool>> GetPermissionsAsync<TResource>(
		thisIResourcePermissionStore resourcePermissionStore,
		thisIResourcePermissionChecker resourcePermissionChecker,
		TResource resource,
		object resourceKey
		)
		{
		Check.NotNull(resourcePermissionStore, nameof(resourcePermissionStore));
		Check.NotNull(resourcePermissionChecker, nameof(resourcePermissionChecker));
		Check.NotNull(resource, nameof(resource));
		Check.NotNull(resourceKey, nameof(resourceKey));

		returnresourcePermissionStore.GetPermissionsAsync(
		returnresourcePermissionChecker.GetPermissionsAsync(
		typeof(TResource).FullName!,
		resourceKey.ToString()!
		);
Expand Down
Original file line number	Diff line number	Diff line change
Expand Up		@@ -28,7 +28,7 @@ public override async Task<PermissionGrantResult> CheckAsync(ResourcePermissionV

		foreach (var role in roles.Distinct())
		{
		if (await ResourcePermissionStore.IsGrantedAsync(context.Permission.Name, Name, role))
		if (await ResourcePermissionStore.IsGrantedAsync(context.Permission.Name,context.ResourceName, context.ResourceKey,Name, role))
		{
		return PermissionGrantResult.Granted;
		}
Expand All		@@ -52,7 +52,7 @@ public override async Task<MultiplePermissionGrantResult> CheckAsync(ResourcePer

		foreach (var role in roles.Distinct())
		{
		var multipleResult = await ResourcePermissionStore.IsGrantedAsync(permissionNames.ToArray(), Name, role);
		var multipleResult = await ResourcePermissionStore.IsGrantedAsync(permissionNames.ToArray(),context.ResourceName, context.ResourceKey,Name, role);

		foreach (var grantResult in multipleResult.Result.Where(grantResult =>
		result.Result.ContainsKey(grantResult.Key) &&
Expand Down
Original file line number	Diff line number	Diff line change
Expand Up		@@ -25,7 +25,7 @@ public override async Task<PermissionGrantResult> CheckAsync(ResourcePermissionV
		return PermissionGrantResult.Undefined;
		}

		return await ResourcePermissionStore.IsGrantedAsync(context.Permission.Name, Name, userId)
		return await ResourcePermissionStore.IsGrantedAsync(context.Permission.Name,context.ResourceName, context.ResourceKey,Name, userId)
		? PermissionGrantResult.Granted
		: PermissionGrantResult.Undefined;
		}
Expand All		@@ -41,6 +41,6 @@ public override async Task<MultiplePermissionGrantResult> CheckAsync(ResourcePer
		return new MultiplePermissionGrantResult(permissionNames);
		}

		return await ResourcePermissionStore.IsGrantedAsync(permissionNames, Name, userId);
		return await ResourcePermissionStore.IsGrantedAsync(permissionNames,context.ResourceName, context.ResourceKey,Name, userId);
		}
		}
Original file line number	Diff line number	Diff line change
Expand Up		@@ -12,22 +12,22 @@ public static class EntityResourcePermissionStoreExtensions
		/// Checks if the specified permission is granted for the given entity.
		/// </summary>
		/// <typeparam name="TEntity">The type of the entity.</typeparam>
		/// <param name="resourcePermissionStore">The resource permission checker instance.</param>
		/// <param name="resourcePermissionChecker">The resource permission checker instance.</param>
		/// <param name="permissionName">The name of the permission to check.</param>
		/// <param name="entity">The entity for which the permission is being checked.</param>
		/// <returns>A task that represents the asynchronous operation. The task result is a boolean indicating whether the permission is granted.</returns>
		public static Task<bool> IsGrantedAsync<TEntity>(
		thisIResourcePermissionStore resourcePermissionStore,
		thisIResourcePermissionChecker resourcePermissionChecker,
		string permissionName,
		TEntity entity
		)
		where TEntity : class, IEntity
		{
		Check.NotNull(resourcePermissionStore, nameof(resourcePermissionStore));
		Check.NotNull(resourcePermissionChecker, nameof(resourcePermissionChecker));
		Check.NotNullOrWhiteSpace(permissionName, nameof(permissionName));
		Check.NotNull(entity, nameof(entity));

		returnresourcePermissionStore.IsGrantedAsync(
		returnresourcePermissionChecker.IsGrantedAsync(
		permissionName,
		typeof(TEntity).FullName!,
		entity.GetKeys().JoinAsString(",")
Expand All		@@ -38,19 +38,19 @@ TEntity entity
		/// Retrieves a dictionary of permissions and their granted status for the specified entity.
		/// </summary>
		/// <typeparam name="TEntity">The type of the entity.</typeparam>
		/// <param name="resourcePermissionStore">The resource permission checker instance.</param>
		/// <param name="resourcePermissionChecker">The resource permission checker instance.</param>
		/// <param name="entity">The entity for which the permissions are being retrieved.</param>
		/// <returns>A dictionary where the keys are permission names and the values are booleans indicating whether the permission is granted.</returns>
		public static Task<IDictionary<string, bool>> GetPermissionsAsync<TEntity>(
		thisIResourcePermissionStore resourcePermissionStore,
		thisIResourcePermissionChecker resourcePermissionChecker,
		TEntity entity
		)
		where TEntity : class, IEntity
		{
		Check.NotNull(resourcePermissionStore, nameof(resourcePermissionStore));
		Check.NotNull(resourcePermissionChecker, nameof(resourcePermissionChecker));
		Check.NotNull(entity, nameof(entity));

		returnresourcePermissionStore.GetPermissionsAsync(
		returnresourcePermissionChecker.GetPermissionsAsync(
		typeof(TEntity).FullName!,
		entity.GetKeys().JoinAsString(",")
		);
Expand Down
Original file line number	Diff line number	Diff line change
Expand Up		@@ -35,4 +35,9 @@ public override void PreConfigureServices(ServiceConfigurationContext context)
		context.Services.AddConventionalRegistrar(new AbpRepositoryConventionalRegistrar());
		context.Services.OnRegistered(ChangeTrackingInterceptorRegistrar.RegisterIfNeeded);
		}

		public override void ConfigureServices(ServiceConfigurationContext context)
		{
		context.Services.AddEntityResourcePermissionAuthorization();
		}
		}