In trying to figure out best practices for using roles in conjunction
with the customer-salesperson relationship,
I have come across some previous discussions and some documents.
In
http://mail-archives.apache.org/mod_mbox/ofbiz-user/201102.mbox/%3c4d4af19d.6040...@free-man.net%3E
Adrian expressed the opinion that the use of roles and permissions and
said that individual installations are following different patterns.
I also found
https://cwiki.apache.org/confluence/download/attachments/13271792/OFBizDatamodelBook_11x17_1of4_20081029.pdf?api=v2
which describes the underlying entities and their relationships.
http://stackoverflow.com/questions/21820972/how-to-model-party-relationship-data-in-ofbiz
discusses the mechanics of making the relatioships at the entity level
https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Security+Permissions#OFBizSecurityPermissions-Atrecordlevel,byusingRolelimitedpermissionsorrelatedmeans
is a long mix of coding advice and installation/configuration advice
that needs to be clarified with a better overview/detail structure.
Needs to have a clearer separation between concepts, tasks and processes.
https://cwiki.apache.org/confluence/display/OFBENDUSER/Role-Oriented+Task+Instructions+for+Users
is the start of a discussion about best practices for roles.
It is very old but the pages that have content seem to have a lot of info.
It could be written in a clearer fashion with fewer words, more
separation of context from tasks and responsibilities and more graphics.
It appears that a lot of thought has gone into roles and permissions
over the years.
I was not able to find a set of rules or even best practices.
I guess that there must be some relationships that are embedded in code,
in templates or OTB configuration files.
These should be documented.
1) Are there some best practices or even common practices that can be
clearly explained?
- "When setting up a customer you should use the following roles for
the buyer, payables department, shipping locations, purchasing
department and youir sales people"
- "When setting up your employees, you should use the following
table to plan the roles for logged in users according to their functions"
Are there some specific OTB requirements for access and security
that should be clearly identified?
2) Where should this be done?
3) Should the existing pages with content from
https://cwiki.apache.org/confluence/display/OFBENDUSER/Role-Oriented+Task+Instructions+for+Users
be retained as a starting point for cleaning this up.
Ron
--
Ron Wheeler
President
Artifact Software Inc
email: rwhee...@artifact-software.com
skype: ronaldmwheeler
phone: 866-970-2435, ext 102
