[OFBiz] Users - Strategy for accessing custom data

[Adrian Crum]

Ashish,

What you describe is what we have implemented here where I work.

The approach we took was to assign roles to the parties, then filter the 
parties by the roles that the user is permitted to see. The filtering 
can be done through a service or through a bsh script.

Likewise, adding a new party group automatically adds the appropriate 
role to the group - depending on the application.

Example: we have dealers, and only certain users are allowed to 
view/add/edit dealer information. So we created a dealer application and 
set it up so that only users with dealer security permissions can access 
the application. Within the application, the business logic only 
displays/creates/updates party groups that have the dealer role.


Ashish Hareet wrote:

> Dear all,
> 
> While developing an application I've come across a situation where I need to find a middle ground.
> 
> I have to create parties pretty much in the way that "Create New Party Group" does
> in the party manager application. In my application I have to restrict the choices
> for the "Party Group Type" based on the data specific to the application. This means that
> I need to restrict the choices for the user to the ones defined by me.
> 
> Possible ways I could think of to do this.
> 1. Hard code the values in the forms based on the data defined by me 
> 2. Create a service that'll get the restricted data(app specific) & add it to 
> the current context
> 3. Add a bsh script to the widget definition that'll add the restricted data
> in the current context
> 
> Can somebody kindly advice if there is any other way to do this or if I'm
> on the right track...
> 
> Also, of the options listed above, which is a better choice...
> 
> Thanks
> Ashish Hareet
>  
> _______________________________________________
> Users mailing list
> Users at lists.ofbiz.org
> http://lists.ofbiz.org/mailman/listinfo/users
>