How do I implement data permission control，please?

[effapp]

How do I implement data permission control? For example, in the admin interface, logged-in users can only see their own bills and cannot see other people's bills.

[hishamco]

1. You need to implement IPermissionProvider, which allows you to define who did what (Roles & Permissions)
2. Register the implementation using AddPermissionProvider in the Startup
3. Finally, you can use IAuthroizationService.AuthorizeAsync(User, Permission) to check the user's permission

OrchardCore/src/OrchardCore.Modules/OrchardCore.Https/Drivers/HttpsSettingsDisplayDriver.cs

Lines 44 to 48 in 70ed6a9

	var user = _httpContextAccessor.HttpContext?.User;
	if (!await _authorizationService.AuthorizeAsync(user, Permissions.ManageHttps))
	{
	return null;
	}

[effapp]

Hi @hishamco ,

How to implement that logged-in users can only see their own bills and cannot see other people's bills?

[hishamco]

As I mentioned earlier, you need to create a permission and then specify the role to access these permissions. Have a look at ViewContent and ViewOwnContent permissions, which look the same for what you are asking

[hishamco]

Is there anything to add here, or shall we close this?