Abp.Zero Application should inherit this class to implement . Constructor. Represents a role in an application. A role is used to group permissions. Application should use permissions to check if user is granted to perform an operation. Checking 'if a user has a role' is not possible until the role is static (). Static roles can be used in the code and can not be deleted by users. Non-static (dynamic) roles can be added/removed by users and we can not know their name while coding. A user can have multiple roles. Thus, user will have all permissions of all assigned roles. Unique name of this role. Creates a new object. TenantId or null (if this is not a tenant-level role) Display name of the role Creates a new object. TenantId or null (if this is not a tenant-level role) Unique role name Display name of the role Extends of ASP.NET Identity Framework. Applications should derive this class with appropriate generic arguments. Constructor. Checks if a role is granted for a permission. The role's name to check it's permission Name of the permission True, if the role has the permission Checks if a role has a permission. The role's id to check it's permission Name of the permission True, if the role has the permission Checks if a role is granted for a permission. The role The permission True, if the role has the permission Checks if a role is granted for a permission. role id The permission True, if the role has the permission Gets granted permission names for a role. Role id List of granted permissions Gets granted permission names for a role. Role name List of granted permissions Gets granted permissions for a role. Role List of granted permissions Sets all granted permissions of a role at once. Prohibits all other permissions. Role id Permissions Sets all granted permissions of a role at once. Prohibits all other permissions. The role Permissions Grants a permission for a role. Role Permission Prohibits a permission for a role. Role Permission Prohibits all permissions for a role. Role Resets all permission settings for a role. It removes all permission settings for the role. Role Creates a role. Role Deletes a role. Role Gets a role by given id. Throws exception if no role with given id. Role id Role Throws exception if no role with given id Gets a role by given name. Throws exception if no role with given roleName. Role name Role Throws exception if no role with given roleName Implements 'Role Store' of ASP.NET Identity Framework. Constructor. Represents a user. User name. User name must be unique for it's tenant. Email address of the user. Email address must be unique for it's tenant. Extends of ASP.NET Identity Framework. Check whether a user is granted for a permission. User id Permission name Check whether a user is granted for a permission. User Permission Check whether a user is granted for a permission. User id Permission Gets granted permissions for a user. Role List of granted permissions Sets all granted permissions of a user at once. Prohibits all other permissions. The user Permissions Prohibits all permissions for a user. User Resets all permission settings for a user. It removes all permission settings for the user. User will have permissions according to his roles. This method does not prohibit all permissions. For that, use . User Grants a permission for a user if not already granted. User Permission Prohibits a permission for a user if it's granted. User Permission Gets a user by given id. Throws exception if no user found with given id. User id User Throws exception if no user found with given id Extension methods for . Check whether a user is granted for a permission. User manager User id Permission name Implements 'User Store' of ASP.NET Identity Framework. Constructor. Tries to find a user with user name or email address in current tenant. User name or email address User or null Tries to find a user with user name or email address in given tenant. Tenant Id User name or email address User or null Checks errors of given and throws if it's not succeeded. Identity result to check Checks errors of given and throws if it's not succeeded. Identity result to check Localization manager to localize error messages