Rajesh, There is a basic service which checks the weather an user will have permission to access some UI, process or not. Which can be override as per the business need. Please take a look into the PartyPermissionServices.xml. Here you can see examples with fact service always returns true or false. Also it overrides the default behavior and returns true for userLoing based on partyId check.
Note that all permission services implements permissionInterface, all the code in these service is around what data model Deepak Nigam suggested. HTH! -- Rishi Solanki Sr Manager, Enterprise Software Development HotWax Systems Pvt. Ltd. Direct: +91-9893287847 http://www.hotwaxsystems.com www.hotwax.co On Fri, Mar 1, 2019 at 2:01 PM Rajesh Mallah <mallah.raj...@gmail.com> wrote: > Hello Mr Deepak / List , > > can you also elaborate to what extent OOTB handles the isolation of > view between resource owners. Eg below the person asks viewing > his *own* resource but not others. > > > > > create sale order, view and edit own sale order. Cannot update or view > > other sale order which is not belong to themself. > > regds > mallah. > > On Fri, Mar 1, 2019 at 9:53 AM Deepak Nigam <deepak.nigam1...@gmail.com> > wrote: > > > Hi Thanh, > > > > The permissions you are looking for and corresponding security group are > > already available OOTB. You only need to associate user login with > > appropriate security groups. Following entities can be of your interest: > > > > 1) SecurityPermission > > 2) SecurityGroup > > 3) SecurityGroupPermission > > 4) UserLogin > > 4) UserLoginSecurityGroup > > > > It can be also achieved via 'Party Manager' application. Just open the > > profile of the party and you can add/remove him to any security group. > This > > feature is available under 'User Name(s)' section. > > > > Thanks & Regards > > -- > > Deepak Nigam > > > > > > On Fri, Mar 1, 2019 at 2:58 AM Jacques Le Roux < > > jacques.le.r...@les7arts.com> > > wrote: > > > > > Hi Thanh, > > > > > > Your message has been moderated. > > > > > > Please subscribe to the user ML for such questions and then use your > > email > > > client > > > See also why here http://ofbiz.apache.org/mailing-lists.html > > > > > > You will get a better support , it's more fair to share with everybody > > > and people can answer you directly on the ML rather than directly to > you > > > The wider the audience the better the answers you might get > > > > > > Also it's more work for moderators who have to accept your messages as > > > long as you have not subscribed. > > > I'll personally no longer accept them (other moderators still could) > > > > > > Thanks > > > > > > Jacques > > > > > > Le 28/02/2019 à 19:01, thanh a écrit : > > > > Hi all, > > > > > > > > I am newbie in ofbiz, > > > > > > > > I want to create permission call "Salesman", which this permission, > > user > > > can > > > > create sale order, view and edit own sale order. Cannot update or > view > > > other > > > > sale order which is not belong to themself. > > > > > > > > How can I do it, please show me. > > > > > > > > Thanks and best regards. > > > > Thanh > > > > > > > > > > > > > > > > -- > > > > Sent from: http://ofbiz.135035.n4.nabble.com/OFBiz-Dev-f165671.html > > > > > > > > > >
