AppAuthorizationProvider.cs

var controlNumbersReport = pages.CreateChildPermission(AppPermissions.Pages_ControlNumbersReport, L("ControlNumbersReport"), multiTenancySides: MultiTenancySides.Tenant);

AppPermissions.cs

public const string Pages_ControlNumbersReport = "Pages.ControlNumbersReport";

Anonymous

using Echonos.Authorization;

[AllowAnonymous]
public async Task<ActionResult> GetLogo(int? tenantId)
{
}

AppPermissions

using Abp.Authorization;
using Echonos.Authorization;

[AbpAuthorize(AppPermissions.Pages_ControlNumbers)]
  public class ControlNumbersAppService : EchonosAppServiceBase, IControlNumbersAppService {
    public void CreateUser(CreateOrUpdateUserInput input)
    {
      if (!PermissionChecker.IsGranted("Administration.UserManagement.CreateUser"))
      {
        throw new AbpAuthorizationException("You are not authorized to create user!");
      }
      //A user can not reach this point if he is not granted for "Administration.UserManagement.CreateUser" permission.
      
      PermissionChecker.Authorize("Administration.UserManagement.CreateUser");
      //A user can not reach this point if he is not granted for "Administration.UserManagement.CreateUser" permission.
    }
  }
}

Current User

User user = GetCurrentUser();

Current User's Roles

var currentUserRoleNames = await UserManager.GetRolesAsync(GetCurrentUser()).ToArray();

Current Tenant

Tenant tenant = GetCurrentTenant();

Client-Side

const isPartner = abp.auth.isGranted("Pages.Partner");

<div class="col-md-3" [hidden]="!isGrantedAny('Pages.Partner')">

<a href="javascript:;" *ngIf="permission.isGranted('Pages.ControlNumbers.Delete')"
  (click)="deleteControlNumber(record.controlNumber)">{{l('Delete')}}</a>
  
<button *ngIf="'Pages.Administration.WebhookSubscription.Create' | permission">

Introducing New Tenant to Platform

AbpTenants

Where TenancyName = 'CNE'
Result => TenantId = 2

AbpUsers

Where TenantId = 2 And Username = 'admin'
Result => UserId = 6

AbpRoles

Where TenantId = 2 And (Name = 'User' Or Name = 'Admin')
Result => RoleId = 4 (Admin), 5 (User)

AbpUserRoles

Where UserId = 6
Result => RoleId = 4 (Admin), 5 (User)

AbpPermissions

For Provider

User Role Needs to have the RolePermissionSetting for Pages.Provider as IsGranted = 1.
Both Roles (Admin and User) should not have IsGranted as 1.
Where (RoleId = 4 Or RoleId = 5) And (Name = 'Pages' Or Name = 'Pages.Provider' Or Name = 'Pages.Partner')
Result =>

For Partner

Same logic as above reversed.
Notice that the only thing that changes is the Id 102, Name column.

Current User's Roles

var currentUserRoleNames = UserManager.GetRolesAsync(GetCurrentUser()).Result.ToArray();