[OFBiz] Users - Users, Parties, Security

[Adrian Crum]

I'm trying to configure OFBiz to work with multiple roles and limiting 
user access to certain applications or data.

If anyone could offer some insight, I would appreciate it very much.

Here's what I've set up so far:

Party Groups
------------
   Hallmark Southwest Corporation (Organization)
   Praxis Products, Incorporated (Organization)
   Sales Department (Department) member of both Organizations
   Service Department (Department) member of both Organizations
   Purchasing Department (Department) member of both Organizations
   Production Department (Department) member of both Organizations

Facility Groups
---------------
   Southern California (Management Structure)

Facilities
----------
   Hallmark Southwest, Plant 1 (Plant) member of Southern California
   Praxis Products, Plant 1 (Plant) member of Southern California

In real life, both organizations have their own sets of departments - 
they just share the same department structure.

Here is what I'm trying to accomplish, using what I've set up as an example:

The Sales Dept would have a role, let's say view/add/edit/delete sales 
orders. I set up a party Sally Smith. I make her a member of Sales Dept 
(Party Group) and Praxis Products (Facility). Therefore she should be 
able to view/add/edit/delete sales orders for Praxis Products. Purchase 
orders, GL, etc for Praxis would not be accessible. Likewise, she would 
not have access to ANY operations involving Hallmark Southwest.

To me, a department represents a set of operations to perform (a role). 
Those operations can then be performed on a subset of data (a 
"company"). Using the combination of Department party group, and 
facilities, I can achieve the security granularity I'm looking for.

I've spent about a week researching Parties, Facilities, Groups, 
Security, etc. I've been through the Wiki. I'm still at a loss as to how 
to set this up correctly.

I noticed my confusion was shared by Al Byers:
  http://ofbizwiki.go-integral.com/Wiki.jsp?page=AlByersThoughtsOnSecurity

Was that page ever addressed or responded to?

I looked through the OFBizSecurity.java file. It seems to be a class 
that retrieves security information. Is that correct? If yes, then where 
is security information SET?

-Adrian


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe at ofbiz.dev.java.net
For additional commands, e-mail: users-help at ofbiz.dev.java.net