[OFBiz] Dev - System accounts & Service authorization

Ashish Hareet Ashish.Hareet at cpbinc.com
Thu Jul 28 16:43:15 EDT 2005


I was just browsing over the LoginServices.userLogin & I came across a code snippet that
might potentially help me with security in my apps.

// get the is system flag -- system accounts can only be used for service authentication
boolean isSystem = (isServiceAuth && userLogin.get("isSystem") != null) ?
	"Y".equalsIgnoreCase(userLogin.getString("isSystem")) : false;

Some services have a particular security requirement at the code level which I would rather not touch
at the moment & given the fact that the security & the layout of my applications is very different from
what OfBiz uses. I'm left with 2 choices - change the core codebase or maybe somehow push in a valid
userlogin for the service to run, the latter being my preference.

If it's possible to push in a valid login for services alone, I'd like to know
- Maybe point me to some screens/apps that do such a thing
- How to create such a login in the db
- How to create such a login at runtime
- How to use such a login

Thanks for your time. Your feedback is appreciated
Ashish Hareet



More information about the Dev mailing list