Auth Debug

Stand: 28.04.2026 13:55:47

Konfiguration (appsettings)

MES:ApplicationId: 264c35f4-8309-477f-8b95-d0cdb0001f01

MES:MandantId: 00000000-0000-0000-0000-000000000000

Ignore App/Mandant Validation: True

Mandant-Check: passt nicht

Konfigurierte Application (by ID)

Keine Application mit dieser ID gefunden.

App-Kandidaten per ApplicationKey

Tenant App (configured MandantId)

Nicht gefunden.

Global App (MandantID = Guid.Empty)

Nicht gefunden.

Aktueller UserContext

Nicht eingeloggt (oder keine Session/Cookies).

Identitaets-Diagnose

Keine Identitaetsdaten verfuegbar.

DB-Rohdaten aktueller User

Keine DB-Rohdaten verfuegbar.

Effektive Permissions

Keine Permissions im CurrentUserContext.

Effektive Gruppen

Keine Gruppen im CurrentUserContext.

SQL-Vorlage zum Nachvollziehen

Den Block direkt nach SSMS kopieren und ausfuehren.

-- Auth-/Portal-Debug fuer aktuellen User
DECLARE @UserId UNIQUEIDENTIFIER = '00000000-0000-0000-0000-000000000000';
DECLARE @MandantId UNIQUEIDENTIFIER = '00000000-0000-0000-0000-000000000000';
DECLARE @ApplicationId UNIQUEIDENTIFIER = '00000000-0000-0000-0000-000000000000';
DECLARE @CustomerId UNIQUEIDENTIFIER = '00000000-0000-0000-0000-000000000000';

SELECT * FROM [User] WHERE [ID] = @UserId;
SELECT * FROM [Mandant] WHERE [ID] = @MandantId;
SELECT * FROM [Customer] WHERE [ID] = @CustomerId;
SELECT [ID], [FK_Company], [Title] FROM [Mandant] WHERE [ID] = @MandantId;
SELECT [ID], [Title], [ShortTitle], [MandantID] FROM [Customer] WHERE [MandantID] = @MandantId ORDER BY [Title];

SELECT * FROM [UserApplication] WHERE [UserID] = @UserId;
SELECT ua.*, a.[Title] AS [ApplicationTitle]
FROM [UserApplication] ua
LEFT JOIN [Application] a ON a.[ID] = ua.[ApplicationID]
WHERE ua.[UserID] = @UserId
ORDER BY ua.[ApplicationID];

SELECT * FROM [Application] WHERE [ID] = @ApplicationId;
SELECT * FROM [ApplicationPermission] WHERE [ApplicationID] = @ApplicationId ORDER BY [PermissionKey], [PermissionName];

SELECT uap.*, ap.[PermissionKey], ap.[PermissionName]
FROM [UserApplicationPermission] uap
INNER JOIN [UserApplication] ua ON ua.[ID] = uap.[UserApplicationID]
LEFT JOIN [ApplicationPermission] ap ON ap.[ID] = uap.[PermissionID]
WHERE ua.[UserID] = @UserId
ORDER BY ap.[PermissionKey], ap.[PermissionName];

SELECT ugm.*, ug.[Title] AS [UserGroupTitle], ug.[MandantID] AS [UserGroupMandantId]
FROM [work].[UserGroupMember] ugm
INNER JOIN [work].[UserGroup] ug ON ug.[ID] = ugm.[FK_UserGroup]
WHERE ugm.[FK_User] = @UserId
ORDER BY ug.[Title];

SELECT ugp.*, ug.[Title] AS [UserGroupTitle]
FROM [work].[UserGroupPermission] ugp
INNER JOIN [work].[UserGroup] ug ON ug.[ID] = ugp.[FK_UserGroup]
WHERE ugp.[MandantID] = @MandantId
  AND ugp.[FK_UserGroup] IN (
      SELECT ugm.[FK_UserGroup]
      FROM [work].[UserGroupMember] ugm
      WHERE ugm.[FK_User] = @UserId
  )
ORDER BY ug.[Title], ugp.[PermissionKey];

SELECT cg.*, c.[Title] AS [CustomerTitle]
FROM [CustomerGroups] cg
LEFT JOIN [Customer] c ON c.[ID] = cg.[FK_Customer]
WHERE cg.[FK_Customer] = @CustomerId
ORDER BY cg.[Title];

SELECT cgm.*, cg.[Title] AS [CustomerGroupTitle]
FROM [CustomerGroupMembers] cgm
INNER JOIN [CustomerGroups] cg ON cg.[ID] = cgm.[FK_Group]
WHERE cgm.[FK_User] = @UserId
ORDER BY cg.[Title];

SELECT cgap.*, cg.[Title] AS [CustomerGroupTitle], ap.[PermissionKey], ap.[PermissionName]
FROM [CustomerGroupApplicationPermissions] cgap
INNER JOIN [CustomerGroups] cg ON cg.[ID] = cgap.[FK_Group]
LEFT JOIN [ApplicationPermission] ap ON ap.[ID] = cgap.[PermissionID]
WHERE cgap.[FK_Group] IN (
      SELECT cgm.[FK_Group]
      FROM [CustomerGroupMembers] cgm
      WHERE cgm.[FK_User] = @UserId
  )
ORDER BY cg.[Title], ap.[PermissionKey], ap.[PermissionName];

-- Schnellcheck Typbestimmung
SELECT
    u.[ID] AS [UserId],
    u.[Username],
    u.[IsEmployee] AS [IsEmployeeFlag],
    u.[FK_Kunde] AS [UserCustomerId],
    u.[MandantID] AS [UserMandantId],
    m.[FK_Company] AS [MandantCompanyId],
    CASE
        WHEN u.[FK_Kunde] IS NOT NULL AND m.[FK_Company] IS NOT NULL AND u.[FK_Kunde] = m.[FK_Company] THEN 1
        ELSE 0
    END AS [IsAssignedToMandantCompany],
    CASE
        WHEN u.[FK_Kunde] IS NOT NULL AND (m.[FK_Company] IS NULL OR u.[FK_Kunde] <> m.[FK_Company]) THEN 1
        ELSE 0
    END AS [IsCustomerEmployee]
FROM [User] u
LEFT JOIN [Mandant] m ON m.[ID] = @MandantId
WHERE u.[ID] = @UserId;