Let the Manage Role permission as a sub-permission of Edit.

Resolve #18935
abpframework · Feb 8, 2024 · 059ca71 · 059ca71
1 parent e57159f
commit 059ca71
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/....Identity.Application.Contracts/Volo/Abp/Identity/IdentityPermissionDefinitionProvider.cs b/....Identity.Application.Contracts/Volo/Abp/Identity/IdentityPermissionDefinitionProvider.cs
@@ -18,10 +18,10 @@ public override void Define(IPermissionDefinitionContext context)
 
         var usersPermission = identityGroup.AddPermission(IdentityPermissions.Users.Default, L("Permission:UserManagement"));
         usersPermission.AddChild(IdentityPermissions.Users.Create, L("Permission:Create"));
-        usersPermission.AddChild(IdentityPermissions.Users.Update, L("Permission:Edit"));
+        var editPermission = usersPermission.AddChild(IdentityPermissions.Users.Update, L("Permission:Edit"));
+        editPermission.AddChild(IdentityPermissions.Users.ManageRoles, L("Permission:ManageRoles"));
         usersPermission.AddChild(IdentityPermissions.Users.Delete, L("Permission:Delete"));
         usersPermission.AddChild(IdentityPermissions.Users.ManagePermissions, L("Permission:ChangePermissions"));
-        usersPermission.AddChild(IdentityPermissions.Users.ManageRoles, L("Permission:ManageRoles"));
 
         identityGroup
             .AddPermission(IdentityPermissions.UserLookup.Default, L("Permission:UserLookup"))