From 298f8632a314c536986c9276b58644cdd96cb841 Mon Sep 17 00:00:00 2001 From: Enis Necipoglu Date: Thu, 19 Feb 2026 15:29:39 +0300 Subject: [PATCH] Update docs/en/Community-Articles/2026-02-19-ABP-Framework-Hidden-Magic/post.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --- .../2026-02-19-ABP-Framework-Hidden-Magic/post.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/en/Community-Articles/2026-02-19-ABP-Framework-Hidden-Magic/post.md b/docs/en/Community-Articles/2026-02-19-ABP-Framework-Hidden-Magic/post.md index 560e1b3181..2647fa0fa4 100644 --- a/docs/en/Community-Articles/2026-02-19-ABP-Framework-Hidden-Magic/post.md +++ b/docs/en/Community-Articles/2026-02-19-ABP-Framework-Hidden-Magic/post.md @@ -217,8 +217,8 @@ public class RemoteServiceAttribute : Attribute ## 13. Permission Checks Are Automatic -**The Magic:** Every application service method is automatically protected. If you don't specify permissions, it still checks for login - no `[Authorize]` attribute needed! - +**The Magic:** Application services that inherit from `ApplicationService` are automatically wrapped with authorization interceptors, so you can declaratively protect methods with permission or authorization attributes instead of manual checks. +Without such attributes (or explicit configuration), methods are not automatically limited to authenticated users, so you still need to configure permissions or `[Authorize]` where protection is required. --- ## 14. Background Workers Auto-Registration