Authorization don't work in my project

[psiersadmin]

Hello radzen team. I'm trying to implement security with radzen/angular. I have entity with add/edit permissions only for admin role

But other users not in admin role have access to edit\add group actions. Where is my problem?

[korchev]

@psiersadmin

But other users not in admin role have access to edit\add group actions.

What is "edit\add group actions"?

[psiersadmin]

Sorry, edit/add pages

[korchev]

Those open in dialogs which don't follow the Angular authorization checks. You can use the Condition property of the Open Dialog action to check for the user role ${security.isInRole('Admin')}

[psiersadmin]

Sorry for my stupid questions . If i allowed access for 'Add application user' page only for 'Sales Manager' role, why member of 'Sales Representative' have access to it?

[korchev]

Page level security is implemented via Angular Router guards. Those work only for pages that have a URL e.g. pages not opened in a dialog.

[psiersadmin]

Thanks. And blazor/server similar logic?

[joshbooker]

Would be nice to make Auth for dialogs work for Blazor.

Suggestion: Blazor Authorization & Dialogs

I see that page authorization doesn't work for dialogs. https://forum.radzen.com/t/authorization-dont-work-in-my-project/5840 It would be nice if (in Blazor at least) the dialog service would obey the view authorization. Perhaps there is a better way, but it seems to work if you were to generate <AuthorizeView> component instead of Authorize attribute. Like so: @page "/add-customer" @layout MainLayout @inherits BlazorAuthTest.Pages.AddCustomerComponent @using Radzen @using Radzen.Blazor @u…

TIA,
Josh