subject:"Permissions"


This page may be helpful to have a beginning of an idea (it gives some 
pointers) on how roles and permissions are used together in
OFBiz to achieve what David is talking about
http://cwiki.apache.org/confluence/display/OFBTECH/OFBiz+security

HTH

Jacques

From: David E Jones d...@me.com

I think Deedra is talking about product administration and not about access to 
products in the ecommerce store.

There is actually some functionality to give more limited permissions to 
certain users. Instead of giving a user the full create,
update and delete permissions for the catalog manager give them the role 
limited permissions. Then (as a different user that has
permission to do so) associate them with a catalog in a certain role (which 
I've forgotten off the top of my head, sorry) and then
they will be able to update products only in that category, and categories 
under that category (note that any category can be
under more than one category at a time, so typically these categories will be 
under one or more categories for permission
purposes, and one or more categories for customer browsing purposes, and 
possibly other categories for other purposes).

If you want more something different than this then some code changing will be 
necessary because of how permissions are currently
implemented in OFBiz.

-David


On Feb 5, 2010, at 6:49 PM, Ruth Hoffman wrote:


Hi DeedraF:
I think this has been answer before on this list not too long ago.

Out-of-the-box, you can't do this with any existing OFBiz applications. 
Basically, the best you can do is limit access to certain
users (belonging to security groups) by store.

To regulate access to specific products in a catalog on the same website (or 
store), you will need to write some code.

Regards,
Ruth

Find me on the web at http://www.myofbiz.com or Google keyword myofbiz
ruth.hoff...@myofbiz.com

DeedraF wrote:

I am very new to OFBiz.  My dev team is working through the technical details
and I am trying to handle the more 'front end' setup activities.  Not
finding very many 'exact steps' or documentation to use as a guide, I
thought perhaps someone reading this post could help out??

I have created a store, catalog, products...and would like to now assign
specific permissions accordingly.  I do not want all my ADMINs to have the
same full access to a catalog.  As a matter of fact, I would like to create
a 'Product Admin' allowing that person/group to simply Add, Edit, and Delete
products in a specific store catalog.  Is this a standard feature in OFBiz
that I am just not grasping how to accomplish?  If it is, please provide
steps that might help me accomplish this task.

Thanks in advance for your help with this issue.

Re: Setting product admin permissions on a store or catalog


http://cwiki.apache.org/confluence/display/OFBTECH/OFBiz+security

Jacques

From: Ruth Hoffman rhoff...@aesolves.com

Hi David:
I tried your solution. It causes errors in the trunk and in version 9.04. Since it is not documented anywhere how to do this, its 
pretty hard to report it as an error or a bug.


Regards,
Ruth

David E Jones wrote:

I think Deedra is talking about product administration and not about access to 
products in the ecommerce store.

There is actually some functionality to give more limited permissions to certain users. Instead of giving a user the full create, 
update and delete permissions for the catalog manager give them the role limited permissions. Then (as a different user that 
has permission to do so) associate them with a catalog in a certain role (which I've forgotten off the top of my head, sorry) and 
then they will be able to update products only in that category, and categories under that category (note that any category can 
be under more than one category at a time, so typically these categories will be under one or more categories for permission 
purposes, and one or more categories for customer browsing purposes, and possibly other categories for other purposes).


If you want more something different than this then some code changing will be necessary because of how permissions are currently 
implemented in OFBiz.


-David


On Feb 5, 2010, at 6:49 PM, Ruth Hoffman wrote:



Hi DeedraF:
I think this has been answer before on this list not too long ago.

Out-of-the-box, you can't do this with any existing OFBiz applications. Basically, the best you can do is limit access to 
certain users (belonging to security groups) by store.


To regulate access to specific products in a catalog on the same website (or 
store), you will need to write some code.

Regards,
Ruth

Find me on the web at http://www.myofbiz.com or Google keyword myofbiz
ruth.hoff...@myofbiz.com

DeedraF wrote:


I am very new to OFBiz.  My dev team is working through the technical details
and I am trying to handle the more 'front end' setup activities.  Not
finding very many 'exact steps' or documentation to use as a guide, I
thought perhaps someone reading this post could help out??

I have created a store, catalog, products...and would like to now assign
specific permissions accordingly.  I do not want all my ADMINs to have the
same full access to a catalog.  As a matter of fact, I would like to create
a 'Product Admin' allowing that person/group to simply Add, Edit, and Delete
products in a specific store catalog.  Is this a standard feature in OFBiz
that I am just not grasping how to accomplish?  If it is, please provide
steps that might help me accomplish this task.

Thanks in advance for your help with this issue.

Re: Setting product admin permissions on a store or catalog


Hi Jacques:
Thanks for posting this link. I used that when trying to determine the 
actual steps involved in getting the requested scenario to work. At a 
high level, it is very informative. Beyond that, what is need is a step 
by step guide. David, if you would be kind enough to provide details, I 
would be more than happy to verify and document the process and then 
post it to the Wiki.

Regards,
Ruth

Jacques Le Roux wrote:
This page may be helpful to have a beginning of an idea (it gives some 
pointers) on how roles and permissions are used together in

OFBiz to achieve what David is talking about
http://cwiki.apache.org/confluence/display/OFBTECH/OFBiz+security

HTH

Jacques

From: David E Jones d...@me.com
I think Deedra is talking about product administration and not about 
access to products in the ecommerce store.


There is actually some functionality to give more limited permissions 
to certain users. Instead of giving a user the full create,
update and delete permissions for the catalog manager give them the 
role limited permissions. Then (as a different user that has
permission to do so) associate them with a catalog in a certain role 
(which I've forgotten off the top of my head, sorry) and then
they will be able to update products only in that category, and 
categories under that category (note that any category can be
under more than one category at a time, so typically these 
categories will be under one or more categories for permission
purposes, and one or more categories for customer browsing purposes, 
and possibly other categories for other purposes).


If you want more something different than this then some code 
changing will be necessary because of how permissions are currently

implemented in OFBiz.

-David


On Feb 5, 2010, at 6:49 PM, Ruth Hoffman wrote:


Hi DeedraF:
I think this has been answer before on this list not too long ago.

Out-of-the-box, you can't do this with any existing OFBiz 
applications. Basically, the best you can do is limit access to certain

users (belonging to security groups) by store.

To regulate access to specific products in a catalog on the same 
website (or store), you will need to write some code.


Regards,
Ruth

Find me on the web at http://www.myofbiz.com or Google keyword 
myofbiz

ruth.hoff...@myofbiz.com

DeedraF wrote:
I am very new to OFBiz.  My dev team is working through the 
technical details

and I am trying to handle the more 'front end' setup activities.  Not
finding very many 'exact steps' or documentation to use as a guide, I
thought perhaps someone reading this post could help out??

I have created a store, catalog, products...and would like to now 
assign
specific permissions accordingly.  I do not want all my ADMINs to 
have the
same full access to a catalog.  As a matter of fact, I would like 
to create
a 'Product Admin' allowing that person/group to simply Add, Edit, 
and Delete
products in a specific store catalog.  Is this a standard feature 
in OFBiz
that I am just not grasping how to accomplish?  If it is, please 
provide

steps that might help me accomplish this task.

Thanks in advance for your help with this issue.

Re: Setting product admin permissions on a store or catalog


Ruth,

This would be great, I think David is not the only person able to explain that 
more... We don't need to rely on David for every
detail... Let him breathe please :D

Jacques

From: Ruth Hoffman rhoff...@aesolves.com

Hi Jacques:
Thanks for posting this link. I used that when trying to determine the actual 
steps involved in getting the requested scenario to
work. At a high level, it is very informative. Beyond that, what is need is a 
step by step guide. David, if you would be kind
enough to provide details, I would be more than happy to verify and document 
the process and then post it to the Wiki.
Regards,
Ruth

Jacques Le Roux wrote:

This page may be helpful to have a beginning of an idea (it gives some 
pointers) on how roles and permissions are used together
in
OFBiz to achieve what David is talking about
http://cwiki.apache.org/confluence/display/OFBTECH/OFBiz+security

HTH

Jacques

From: David E Jones d...@me.com

I think Deedra is talking about product administration and not about access to 
products in the ecommerce store.

There is actually some functionality to give more limited permissions to 
certain users. Instead of giving a user the full
create,
update and delete permissions for the catalog manager give them the role 
limited permissions. Then (as a different user that
has
permission to do so) associate them with a catalog in a certain role (which 
I've forgotten off the top of my head, sorry) and
then
they will be able to update products only in that category, and categories 
under that category (note that any category can be
under more than one category at a time, so typically these categories will be 
under one or more categories for permission
purposes, and one or more categories for customer browsing purposes, and 
possibly other categories for other purposes).

If you want more something different than this then some code changing will be 
necessary because of how permissions are
currently
implemented in OFBiz.

-David


On Feb 5, 2010, at 6:49 PM, Ruth Hoffman wrote:


Hi DeedraF:
I think this has been answer before on this list not too long ago.

Out-of-the-box, you can't do this with any existing OFBiz applications. 
Basically, the best you can do is limit access to
certain
users (belonging to security groups) by store.

To regulate access to specific products in a catalog on the same website (or 
store), you will need to write some code.

Regards,
Ruth

Find me on the web at http://www.myofbiz.com or Google keyword myofbiz
ruth.hoff...@myofbiz.com

DeedraF wrote:

I am very new to OFBiz.  My dev team is working through the technical details
and I am trying to handle the more 'front end' setup activities.  Not
finding very many 'exact steps' or documentation to use as a guide, I
thought perhaps someone reading this post could help out??

I have created a store, catalog, products...and would like to now assign
specific permissions accordingly.  I do not want all my ADMINs to have the
same full access to a catalog.  As a matter of fact, I would like to create
a 'Product Admin' allowing that person/group to simply Add, Edit, and Delete
products in a specific store catalog.  Is this a standard feature in OFBiz
that I am just not grasping how to accomplish?  If it is, please provide
steps that might help me accomplish this task.

Thanks in advance for your help with this issue.

Re: Setting product admin permissions on a store or catalog


Hi Jacques:
Sure.  Can you or some one explain to me how to do this?
As I said before, I wasn't able to make it work given the tools 
available at the time.

Regards,
Ruth

Jacques Le Roux wrote:

Ruth,

This would be great, I think David is not the only person able to 
explain that more... We don't need to rely on David for every

detail... Let him breathe please :D

Jacques

From: Ruth Hoffman rhoff...@aesolves.com

Hi Jacques:
Thanks for posting this link. I used that when trying to determine 
the actual steps involved in getting the requested scenario to
work. At a high level, it is very informative. Beyond that, what is 
need is a step by step guide. David, if you would be kind
enough to provide details, I would be more than happy to verify and 
document the process and then post it to the Wiki.

Regards,
Ruth

Jacques Le Roux wrote:
This page may be helpful to have a beginning of an idea (it gives 
some pointers) on how roles and permissions are used together

in
OFBiz to achieve what David is talking about
http://cwiki.apache.org/confluence/display/OFBTECH/OFBiz+security

HTH

Jacques

From: David E Jones d...@me.com
I think Deedra is talking about product administration and not 
about access to products in the ecommerce store.


There is actually some functionality to give more limited 
permissions to certain users. Instead of giving a user the full

create,
update and delete permissions for the catalog manager give them the 
role limited permissions. Then (as a different user that

has
permission to do so) associate them with a catalog in a certain 
role (which I've forgotten off the top of my head, sorry) and

then
they will be able to update products only in that category, and 
categories under that category (note that any category can be
under more than one category at a time, so typically these 
categories will be under one or more categories for permission
purposes, and one or more categories for customer browsing 
purposes, and possibly other categories for other purposes).


If you want more something different than this then some code 
changing will be necessary because of how permissions are

currently
implemented in OFBiz.

-David


On Feb 5, 2010, at 6:49 PM, Ruth Hoffman wrote:


Hi DeedraF:
I think this has been answer before on this list not too long ago.

Out-of-the-box, you can't do this with any existing OFBiz 
applications. Basically, the best you can do is limit access to

certain
users (belonging to security groups) by store.

To regulate access to specific products in a catalog on the same 
website (or store), you will need to write some code.


Regards,
Ruth

Find me on the web at http://www.myofbiz.com or Google keyword 
myofbiz

ruth.hoff...@myofbiz.com

DeedraF wrote:
I am very new to OFBiz.  My dev team is working through the 
technical details
and I am trying to handle the more 'front end' setup activities.  
Not
finding very many 'exact steps' or documentation to use as a 
guide, I

thought perhaps someone reading this post could help out??

I have created a store, catalog, products...and would like to now 
assign
specific permissions accordingly.  I do not want all my ADMINs to 
have the
same full access to a catalog.  As a matter of fact, I would like 
to create
a 'Product Admin' allowing that person/group to simply Add, Edit, 
and Delete
products in a specific store catalog.  Is this a standard feature 
in OFBiz
that I am just not grasping how to accomplish?  If it is, please 
provide

steps that might help me accomplish this task.

Thanks in advance for your help with this issue.

Re: Setting product admin permissions on a store or catalog


I will wait to see if the 1st to ask this question will get back to us with 
some results, or questions...

Jacques

From: Ruth Hoffman rhoff...@aesolves.com

Hi Jacques:
Sure.  Can you or some one explain to me how to do this?
As I said before, I wasn't able to make it work given the tools 
available at the time.

Regards,
Ruth

Jacques Le Roux wrote:

Ruth,

This would be great, I think David is not the only person able to 
explain that more... We don't need to rely on David for every

detail... Let him breathe please :D

Jacques

From: Ruth Hoffman rhoff...@aesolves.com

Hi Jacques:
Thanks for posting this link. I used that when trying to determine 
the actual steps involved in getting the requested scenario to
work. At a high level, it is very informative. Beyond that, what is 
need is a step by step guide. David, if you would be kind
enough to provide details, I would be more than happy to verify and 
document the process and then post it to the Wiki.

Regards,
Ruth

Jacques Le Roux wrote:
This page may be helpful to have a beginning of an idea (it gives 
some pointers) on how roles and permissions are used together

in
OFBiz to achieve what David is talking about
http://cwiki.apache.org/confluence/display/OFBTECH/OFBiz+security

HTH

Jacques

From: David E Jones d...@me.com
I think Deedra is talking about product administration and not 
about access to products in the ecommerce store.


There is actually some functionality to give more limited 
permissions to certain users. Instead of giving a user the full

create,
update and delete permissions for the catalog manager give them the 
role limited permissions. Then (as a different user that

has
permission to do so) associate them with a catalog in a certain 
role (which I've forgotten off the top of my head, sorry) and

then
they will be able to update products only in that category, and 
categories under that category (note that any category can be
under more than one category at a time, so typically these 
categories will be under one or more categories for permission
purposes, and one or more categories for customer browsing 
purposes, and possibly other categories for other purposes).


If you want more something different than this then some code 
changing will be necessary because of how permissions are

currently
implemented in OFBiz.

-David


On Feb 5, 2010, at 6:49 PM, Ruth Hoffman wrote:


Hi DeedraF:
I think this has been answer before on this list not too long ago.

Out-of-the-box, you can't do this with any existing OFBiz 
applications. Basically, the best you can do is limit access to

certain
users (belonging to security groups) by store.

To regulate access to specific products in a catalog on the same 
website (or store), you will need to write some code.


Regards,
Ruth

Find me on the web at http://www.myofbiz.com or Google keyword 
myofbiz

ruth.hoff...@myofbiz.com

DeedraF wrote:
I am very new to OFBiz.  My dev team is working through the 
technical details
and I am trying to handle the more 'front end' setup activities.  
Not
finding very many 'exact steps' or documentation to use as a 
guide, I

thought perhaps someone reading this post could help out??

I have created a store, catalog, products...and would like to now 
assign
specific permissions accordingly.  I do not want all my ADMINs to 
have the
same full access to a catalog.  As a matter of fact, I would like 
to create
a 'Product Admin' allowing that person/group to simply Add, Edit, 
and Delete
products in a specific store catalog.  Is this a standard feature 
in OFBiz
that I am just not grasping how to accomplish?  If it is, please 
provide

steps that might help me accomplish this task.

Thanks in advance for your help with this issue.

Re: Setting product admin permissions on a store or catalog

2010-02-06 Thread Patrick

Hi Deedra,
The way I do it is I assign a user as a roleTypeId VENDOR to the
appropriate catalog.  Then when someone tries to Add, Edit, Delete, I
check to see if they are a vendor, this checking is done in
ProductServices.xml and CategoryServices.xml.   If basically a DB
query with entity-and   and then some checking if condition ...
Patrick

On Fri, Feb 5, 2010 at 1:31 PM, DeedraF dfith...@kpi-consulting.net wrote:

 I am very new to OFBiz.  My dev team is working through the technical details
 and I am trying to handle the more 'front end' setup activities.  Not
 finding very many 'exact steps' or documentation to use as a guide, I
 thought perhaps someone reading this post could help out??

 I have created a store, catalog, products...and would like to now assign
 specific permissions accordingly.  I do not want all my ADMINs to have the
 same full access to a catalog.  As a matter of fact, I would like to create
 a 'Product Admin' allowing that person/group to simply Add, Edit, and Delete
 products in a specific store catalog.  Is this a standard feature in OFBiz
 that I am just not grasping how to accomplish?  If it is, please provide
 steps that might help me accomplish this task.

 Thanks in advance for your help with this issue.

 --
 View this message in context: 
 http://n4.nabble.com/Setting-product-admin-permissions-on-a-store-or-catalog-tp1470683p1470683.html
 Sent from the OFBiz - User mailing list archive at Nabble.com.

Re: Setting product admin permissions on a store or catalog


Hey cool, already an answer, does it help you Ruth?

Jacques

From: Patrick patrickinminneapo...@gmail.com

Hi Deedra,
The way I do it is I assign a user as a roleTypeId VENDOR to the
appropriate catalog.  Then when someone tries to Add, Edit, Delete, I
check to see if they are a vendor, this checking is done in
ProductServices.xml and CategoryServices.xml.   If basically a DB
query with entity-and   and then some checking if condition ...
Patrick

On Fri, Feb 5, 2010 at 1:31 PM, DeedraF dfith...@kpi-consulting.net wrote:


I am very new to OFBiz. My dev team is working through the technical details
and I am trying to handle the more 'front end' setup activities. Not
finding very many 'exact steps' or documentation to use as a guide, I
thought perhaps someone reading this post could help out??

I have created a store, catalog, products...and would like to now assign
specific permissions accordingly. I do not want all my ADMINs to have the
same full access to a catalog. As a matter of fact, I would like to create
a 'Product Admin' allowing that person/group to simply Add, Edit, and Delete
products in a specific store catalog. Is this a standard feature in OFBiz
that I am just not grasping how to accomplish? If it is, please provide
steps that might help me accomplish this task.

Thanks in advance for your help with this issue.

--
View this message in context: 
http://n4.nabble.com/Setting-product-admin-permissions-on-a-store-or-catalog-tp1470683p1470683.html
Sent from the OFBiz - User mailing list archive at Nabble.com.

Re: Setting product admin permissions on a store or catalog


Hi Jacques:
Yes an answer that begets more questions: who is I ? Did Patrick need 
to write/modify a service to do this? Is there a UI that facilitates 
this? How are users assigned roles types? Lots of unanswered questions.


Ruth

Jacques Le Roux wrote:

Hey cool, already an answer, does it help you Ruth?

Jacques

From: Patrick patrickinminneapo...@gmail.com

Hi Deedra,
The way I do it is I assign a user as a roleTypeId VENDOR to the
appropriate catalog.  Then when someone tries to Add, Edit, Delete, I
check to see if they are a vendor, this checking is done in
ProductServices.xml and CategoryServices.xml.   If basically a DB
query with entity-and   and then some checking if condition ...
Patrick

On Fri, Feb 5, 2010 at 1:31 PM, DeedraF dfith...@kpi-consulting.net 
wrote:


I am very new to OFBiz. My dev team is working through the technical 
details

and I am trying to handle the more 'front end' setup activities. Not
finding very many 'exact steps' or documentation to use as a guide, I
thought perhaps someone reading this post could help out??

I have created a store, catalog, products...and would like to now 
assign
specific permissions accordingly. I do not want all my ADMINs to 
have the
same full access to a catalog. As a matter of fact, I would like to 
create
a 'Product Admin' allowing that person/group to simply Add, Edit, 
and Delete
products in a specific store catalog. Is this a standard feature in 
OFBiz

that I am just not grasping how to accomplish? If it is, please provide
steps that might help me accomplish this task.

Thanks in advance for your help with this issue.

--
View this message in context: 
http://n4.nabble.com/Setting-product-admin-permissions-on-a-store-or-catalog-tp1470683p1470683.html 


Sent from the OFBiz - User mailing list archive at Nabble.com.

Re: Setting product admin permissions on a store or catalog


Also,
What release and version are we talking about?
TIA
Ruth

Ruth Hoffman wrote:

Hi Jacques:
Yes an answer that begets more questions: who is I ? Did Patrick 
need to write/modify a service to do this? Is there a UI that 
facilitates this? How are users assigned roles types? Lots of 
unanswered questions.


Ruth

Jacques Le Roux wrote:

Hey cool, already an answer, does it help you Ruth?

Jacques

From: Patrick patrickinminneapo...@gmail.com

Hi Deedra,
The way I do it is I assign a user as a roleTypeId VENDOR to the
appropriate catalog.  Then when someone tries to Add, Edit, Delete, I
check to see if they are a vendor, this checking is done in
ProductServices.xml and CategoryServices.xml.   If basically a DB
query with entity-and   and then some checking if condition ...
Patrick

On Fri, Feb 5, 2010 at 1:31 PM, DeedraF 
dfith...@kpi-consulting.net wrote:


I am very new to OFBiz. My dev team is working through the 
technical details

and I am trying to handle the more 'front end' setup activities. Not
finding very many 'exact steps' or documentation to use as a guide, I
thought perhaps someone reading this post could help out??

I have created a store, catalog, products...and would like to now 
assign
specific permissions accordingly. I do not want all my ADMINs to 
have the
same full access to a catalog. As a matter of fact, I would like to 
create
a 'Product Admin' allowing that person/group to simply Add, Edit, 
and Delete
products in a specific store catalog. Is this a standard feature in 
OFBiz
that I am just not grasping how to accomplish? If it is, please 
provide

steps that might help me accomplish this task.

Thanks in advance for your help with this issue.

--
View this message in context: 
http://n4.nabble.com/Setting-product-admin-permissions-on-a-store-or-catalog-tp1470683p1470683.html 


Sent from the OFBiz - User mailing list archive at Nabble.com.

Setting product admin permissions on a store or catalog

2010-02-05 Thread DeedraF


I am very new to OFBiz.  My dev team is working through the technical details
and I am trying to handle the more 'front end' setup activities.  Not
finding very many 'exact steps' or documentation to use as a guide, I
thought perhaps someone reading this post could help out??

I have created a store, catalog, products...and would like to now assign
specific permissions accordingly.  I do not want all my ADMINs to have the
same full access to a catalog.  As a matter of fact, I would like to create
a 'Product Admin' allowing that person/group to simply Add, Edit, and Delete
products in a specific store catalog.  Is this a standard feature in OFBiz
that I am just not grasping how to accomplish?  If it is, please provide
steps that might help me accomplish this task.

Thanks in advance for your help with this issue.
 
-- 
View this message in context: 
http://n4.nabble.com/Setting-product-admin-permissions-on-a-store-or-catalog-tp1470683p1470683.html
Sent from the OFBiz - User mailing list archive at Nabble.com.

Re: Setting product admin permissions on a store or catalog

2010-02-05 Thread Ruth Hoffman


Hi DeedraF:
I think this has been answer before on this list not too long ago.

Out-of-the-box, you can't do this with any existing OFBiz applications. 
Basically, the best you can do is limit access to certain users 
(belonging to security groups) by store.


To regulate access to specific products in a catalog on the same website 
(or store), you will need to write some code.


Regards,
Ruth

Find me on the web at http://www.myofbiz.com or Google keyword myofbiz
ruth.hoff...@myofbiz.com

DeedraF wrote:

I am very new to OFBiz.  My dev team is working through the technical details
and I am trying to handle the more 'front end' setup activities.  Not
finding very many 'exact steps' or documentation to use as a guide, I
thought perhaps someone reading this post could help out??

I have created a store, catalog, products...and would like to now assign
specific permissions accordingly.  I do not want all my ADMINs to have the
same full access to a catalog.  As a matter of fact, I would like to create
a 'Product Admin' allowing that person/group to simply Add, Edit, and Delete
products in a specific store catalog.  Is this a standard feature in OFBiz
that I am just not grasping how to accomplish?  If it is, please provide
steps that might help me accomplish this task.

Thanks in advance for your help with this issue.

Re: Setting product admin permissions on a store or catalog

2010-02-05 Thread David E Jones


I think Deedra is talking about product administration and not about access to 
products in the ecommerce store.

There is actually some functionality to give more limited permissions to 
certain users. Instead of giving a user the full create, update and delete 
permissions for the catalog manager give them the role limited permissions. 
Then (as a different user that has permission to do so) associate them with a 
catalog in a certain role (which I've forgotten off the top of my head, sorry) 
and then they will be able to update products only in that category, and 
categories under that category (note that any category can be under more than 
one category at a time, so typically these categories will be under one or more 
categories for permission purposes, and one or more categories for customer 
browsing purposes, and possibly other categories for other purposes).

If you want more something different than this then some code changing will be 
necessary because of how permissions are currently implemented in OFBiz.

-David


On Feb 5, 2010, at 6:49 PM, Ruth Hoffman wrote:

 Hi DeedraF:
 I think this has been answer before on this list not too long ago.
 
 Out-of-the-box, you can't do this with any existing OFBiz applications. 
 Basically, the best you can do is limit access to certain users (belonging to 
 security groups) by store.
 
 To regulate access to specific products in a catalog on the same website (or 
 store), you will need to write some code.
 
 Regards,
 Ruth
 
 Find me on the web at http://www.myofbiz.com or Google keyword myofbiz
 ruth.hoff...@myofbiz.com
 
 DeedraF wrote:
 I am very new to OFBiz.  My dev team is working through the technical details
 and I am trying to handle the more 'front end' setup activities.  Not
 finding very many 'exact steps' or documentation to use as a guide, I
 thought perhaps someone reading this post could help out??
 
 I have created a store, catalog, products...and would like to now assign
 specific permissions accordingly.  I do not want all my ADMINs to have the
 same full access to a catalog.  As a matter of fact, I would like to create
 a 'Product Admin' allowing that person/group to simply Add, Edit, and Delete
 products in a specific store catalog.  Is this a standard feature in OFBiz
 that I am just not grasping how to accomplish?  If it is, please provide
 steps that might help me accomplish this task.
 
 Thanks in advance for your help with this issue.

Re: Setting product admin permissions on a store or catalog

2010-02-05 Thread Ruth Hoffman

Hi David:
I tried your solution. It causes errors in the trunk and in version
9.04. Since it is not documented anywhere how to do this, its pretty
hard to report it as an error or a bug.

Regards,
Ruth

David E Jones wrote:

I think Deedra is talking about product administration and not about access to
products in the ecommerce store.

There is actually some functionality to give more limited permissions to certain users. Instead of
giving a user the full create, update and delete permissions for the catalog manager give them the
role limited permissions. Then (as a different user that has permission to do so)
associate them with a catalog in a certain role (which I've forgotten off the top of my head,
sorry) and then they will be able to update products only in that category, and categories under
that category (note that any category can be under more than one category at a time, so
typically these categories will be under one or more categories for permission purposes, and one or
more categories for customer browsing purposes, and possibly other categories for other purposes).

If you want more something different than this then some code changing will be
necessary because of how permissions are currently implemented in OFBiz.

-David

On Feb 5, 2010, at 6:49 PM, Ruth Hoffman wrote:

Hi DeedraF:
I think this has been answer before on this list not too long ago.

Out-of-the-box, you can't do this with any existing OFBiz applications.
Basically, the best you can do is limit access to certain users (belonging to
security groups) by store.

To regulate access to specific products in a catalog on the same website (or
store), you will need to write some code.

Regards,
Ruth

Find me on the web at http://www.myofbiz.com or Google keyword myofbiz
ruth.hoff...@myofbiz.com

DeedraF wrote:

I am very new to OFBiz. My dev team is working through the technical details
and I am trying to handle the more 'front end' setup activities. Not
finding very many 'exact steps' or documentation to use as a guide, I
thought perhaps someone reading this post could help out??

I have created a store, catalog, products...and would like to now assign
specific permissions accordingly. I do not want all my ADMINs to have the
same full access to a catalog. As a matter of fact, I would like to create
a 'Product Admin' allowing that person/group to simply Add, Edit, and Delete
products in a specific store catalog. Is this a standard feature in OFBiz
that I am just not grasping how to accomplish? If it is, please provide
steps that might help me accomplish this task.

Thanks in advance for your help with this issue.

Re: Setting product admin permissions on a store or catalog

2010-02-05 Thread Ruth Hoffman


Sorry David:

I believe you are correct in that I misunderstood the question. What I 
should have said to you is: I have tried adding roles and roletypes to 
products, categories and catalogs in both the trunk and version 9.04 and 
it does not work or is broken. I don't know which since I'm not 100% 
certain how to set this up. I tried several scenarios none of which 
work. The best I was able to achieve was controlled access to the 
Catalog Manager based on security groups.


Regards,
Ruth

Ruth Hoffman wrote:

Hi David:
I tried your solution. It causes errors in the trunk and in version 
9.04. Since it is not documented anywhere how to do this, its pretty 
hard to report it as an error or a bug.


Regards,
Ruth

David E Jones wrote:
I think Deedra is talking about product administration and not about 
access to products in the ecommerce store.


There is actually some functionality to give more limited permissions 
to certain users. Instead of giving a user the full create, update 
and delete permissions for the catalog manager give them the role 
limited permissions. Then (as a different user that has permission 
to do so) associate them with a catalog in a certain role (which I've 
forgotten off the top of my head, sorry) and then they will be able 
to update products only in that category, and categories under that 
category (note that any category can be under more than one 
category at a time, so typically these categories will be under one 
or more categories for permission purposes, and one or more 
categories for customer browsing purposes, and possibly other 
categories for other purposes).


If you want more something different than this then some code 
changing will be necessary because of how permissions are currently 
implemented in OFBiz.


-David


On Feb 5, 2010, at 6:49 PM, Ruth Hoffman wrote:

 

Hi DeedraF:
I think this has been answer before on this list not too long ago.

Out-of-the-box, you can't do this with any existing OFBiz 
applications. Basically, the best you can do is limit access to 
certain users (belonging to security groups) by store.


To regulate access to specific products in a catalog on the same 
website (or store), you will need to write some code.


Regards,
Ruth

Find me on the web at http://www.myofbiz.com or Google keyword 
myofbiz

ruth.hoff...@myofbiz.com

DeedraF wrote:
   
I am very new to OFBiz.  My dev team is working through the 
technical details

and I am trying to handle the more 'front end' setup activities.  Not
finding very many 'exact steps' or documentation to use as a guide, I
thought perhaps someone reading this post could help out??

I have created a store, catalog, products...and would like to now 
assign
specific permissions accordingly.  I do not want all my ADMINs to 
have the
same full access to a catalog.  As a matter of fact, I would like 
to create
a 'Product Admin' allowing that person/group to simply Add, Edit, 
and Delete
products in a specific store catalog.  Is this a standard feature 
in OFBiz
that I am just not grasping how to accomplish?  If it is, please 
provide

steps that might help me accomplish this task.

Thanks in advance for your help with this issue.

Permissions for services called by the user in the frontend

2009-12-16 Thread Alexander1893


Hi all,

I have a general question about permissons:

If I want to call a service I need to have the right permission - which is
absolutly correct regarding security reasons.

I have to call several existing services dependend on the actions a user
makes in the storefrontend - e.g.:
 a customer can load his finaccount by a creditcard payment
 he enters his cc-data and (if the payment provider returns a positive
 result) I want to charge the finaccount with this amount.

When I call the corresponding finAccount-Service for charging the permission
is checked and the roles that are considered are the roles of the logged in
customer. As the customer has not the necessary role, the call returns an
error.

I see the following possibilties:
 I can give the necessary roles to each customer - but I don't know what
 security-impacts this would have
 I could call the service using another person who has the role - but I
 don't know how to do this.

So my question is:
How is the best way to call this kind of services without any security
impacts?

Thanks in advance  sorry (I don't know the role-concept of ofbiz that much
at the moment)
Alexander
-- 
View this message in context: 
http://n4.nabble.com/Permissions-for-services-called-by-the-user-in-the-frontend-tp965460p965460.html
Sent from the OFBiz - User mailing list archive at Nabble.com.

Re: How to set permissions to all new users?

2009-12-06 Thread Rishi Solanki

Thanks Jacques,
I thought mario has user data available and whenever he loads the data he
again needs to assign the same permission to that particular user. So
suggest that way, I see ECA is better option whenever a user created.
Mario, Please ignore my comment as Jacques already provided better way to
handle.
Jacques I will try to remember this and try to get better on which kind of
help actually a subscriber needs.

Thanks Again !

Rishi Solanki
Enterprise Software Developer
HotWax Media Pvt. Ltd.


On Sun, Dec 6, 2009 at 4:19 AM, Jacques Le Roux 
jacques.le.r...@les7arts.com wrote:

 Hi Rishi,
 I wonder if Mario is no looking for a dynamically way to give permissions
 to each new registered user.
 Did you intend to answer to this question ?

 Mario,
 If it was your question and you don't find Rishi's answer a solution I
 guess you have simply to use an ECA which will fires and give some
 permission each time a new user is registered. I let you fill the
 details...

 HTH
 Jacques

 From: Rishi Solanki rishisolan...@gmail.com

  Hi Mario,
 Add its UserLoginSecurityGroup data and associate the permission you want.
 Once the data load and even you drop the DB instance it will loaded again
 on
 ant targets.
 This way you won't need to assign permission again and again to your user
 from party application.

 Rishi Solanki
 Enterprise Software Developer
 HotWax Media Pvt. Ltd.


 On Fri, Dec 4, 2009 at 3:19 PM, MarioF oceanoart...@gmail.com wrote:


 Hi all,

 I want that the new registered users have always some permissions. How
 can
 I
 do that without the admin has to set one by one in the party application?

 Thanks in advance.
 --
 View this message in context:

 http://n4.nabble.com/How-to-set-permissions-to-all-new-users-tp948378p948378.html
 Sent from the OFBiz - User mailing list archive at Nabble.com.

Re: How to set permissions to all new users?

2009-12-06 Thread Jacques Le Roux


Thanks for all your valuable help Rishi!

I'm not quite sure either of my answer, will see...

Jacques
()  ascii ribbon campaign against HTML e-mail
/\  www.asciiribbon.org

From: Rishi Solanki rishisolan...@gmail.com

Thanks Jacques,
I thought mario has user data available and whenever he loads the data he
again needs to assign the same permission to that particular user. So
suggest that way, I see ECA is better option whenever a user created.
Mario, Please ignore my comment as Jacques already provided better way to
handle.
Jacques I will try to remember this and try to get better on which kind of
help actually a subscriber needs.

Thanks Again !

Rishi Solanki
Enterprise Software Developer
HotWax Media Pvt. Ltd.


On Sun, Dec 6, 2009 at 4:19 AM, Jacques Le Roux 
jacques.le.r...@les7arts.com wrote:


Hi Rishi,
I wonder if Mario is no looking for a dynamically way to give permissions
to each new registered user.
Did you intend to answer to this question ?

Mario,
If it was your question and you don't find Rishi's answer a solution I
guess you have simply to use an ECA which will fires and give some
permission each time a new user is registered. I let you fill the
details...

HTH
Jacques

From: Rishi Solanki rishisolan...@gmail.com

 Hi Mario,

Add its UserLoginSecurityGroup data and associate the permission you want.
Once the data load and even you drop the DB instance it will loaded again
on
ant targets.
This way you won't need to assign permission again and again to your user
from party application.

Rishi Solanki
Enterprise Software Developer
HotWax Media Pvt. Ltd.


On Fri, Dec 4, 2009 at 3:19 PM, MarioF oceanoart...@gmail.com wrote:



Hi all,

I want that the new registered users have always some permissions. How
can
I
do that without the admin has to set one by one in the party application?

Thanks in advance.
--
View this message in context:

http://n4.nabble.com/How-to-set-permissions-to-all-new-users-tp948378p948378.html
Sent from the OFBiz - User mailing list archive at Nabble.com.

Re: How to set permissions to all new users?

2009-12-05 Thread Jacques Le Roux


Hi Rishi,
I wonder if Mario is no looking for a dynamically way to give permissions to 
each new registered user.
Did you intend to answer to this question ?

Mario,
If it was your question and you don't find Rishi's answer a solution I guess you have simply to use an ECA which will fires and give 
some permission each time a new user is registered. I let you fill the details...


HTH
Jacques

From: Rishi Solanki rishisolan...@gmail.com

Hi Mario,
Add its UserLoginSecurityGroup data and associate the permission you want.
Once the data load and even you drop the DB instance it will loaded again on
ant targets.
This way you won't need to assign permission again and again to your user
from party application.

Rishi Solanki
Enterprise Software Developer
HotWax Media Pvt. Ltd.


On Fri, Dec 4, 2009 at 3:19 PM, MarioF oceanoart...@gmail.com wrote:



Hi all,

I want that the new registered users have always some permissions. How can
I
do that without the admin has to set one by one in the party application?

Thanks in advance.
--
View this message in context:
http://n4.nabble.com/How-to-set-permissions-to-all-new-users-tp948378p948378.html
Sent from the OFBiz - User mailing list archive at Nabble.com.

How to set permissions to all new users?

2009-12-04 Thread MarioF


Hi all,

I want that the new registered users have always some permissions. How can I
do that without the admin has to set one by one in the party application?

Thanks in advance.
-- 
View this message in context: 
http://n4.nabble.com/How-to-set-permissions-to-all-new-users-tp948378p948378.html
Sent from the OFBiz - User mailing list archive at Nabble.com.

Re: How to set permissions to all new users?

2009-12-04 Thread Rishi Solanki

Hi Mario,
Add its UserLoginSecurityGroup data and associate the permission you want.
Once the data load and even you drop the DB instance it will loaded again on
ant targets.
This way you won't need to assign permission again and again to your user
from party application.

Rishi Solanki
Enterprise Software Developer
HotWax Media Pvt. Ltd.


On Fri, Dec 4, 2009 at 3:19 PM, MarioF oceanoart...@gmail.com wrote:


 Hi all,

 I want that the new registered users have always some permissions. How can
 I
 do that without the admin has to set one by one in the party application?

 Thanks in advance.
 --
 View this message in context:
 http://n4.nabble.com/How-to-set-permissions-to-all-new-users-tp948378p948378.html
 Sent from the OFBiz - User mailing list archive at Nabble.com.

Re: Web User Permissions

2009-05-18 Thread aswath narayana

Look at the AccountSecurityData.xml and at the end of the file, there are
SecurityGroupPermissions.
Give FULLADMIN group rights for the user,  for ACCTG_ATX_ADMIN
Give FLEXADMIN group rights for the user, for ACCTG_ATX_CREATE

Steps to assign a SecurityGroup

   - Login with superuser privileges equivalent to admin/ofbiz.
   - Search for the party for which the permissions are need to be assigned
   - Goto the Party profile screen and look at the Username section on the
   rightside
   - Click on the SecurityGroups
   - In the 'Add UserLogin to the SecurityGroup' sreen, choose FULLADMIN


-Aswath


On Mon, May 18, 2009 at 2:20 AM, Alan ahal...@mercatx.co.uk wrote:

 Hi

 I am having problems with updating ledgers when web users pay for goods.

 I sure the problem is configuration but I don't know where. All help
 greatly appreciated.

 Also, I'm not clear on how new users are assigned the ACCTG_ATX
 permissions.

 Alan

 The log message is
 2009-05-17 19:51:17,700 (TP-Processor14) [
 ServiceDispatcher.java:500:ERROR]
  exception report
 --
 Service [createAcctgTransAndEntries] threw an unexpected exception/error
 Exception: org.ofbiz.service.ServiceAuthException
 Message: Security Error: To run createAcctgTransAndEntries you must have
 the one of the following permissions: ACCTG_ATX_CREATE, ACCTG_ATX_ADMIN
  stack trace
 ---
 org.ofbiz.service.ServiceAuthException: Security Error: To run
 createAcctgTransAndEntries you must have the one of the following
 permissions: ACCTG_ATX_CREATE, ACCTG_ATX_ADMIN
 org.ofbiz.service.ServiceDispatcher.checkAuth(ServiceDispatcher.java:908)
 org.ofbiz.service.ServiceDispatcher.runSync(ServiceDispatcher.java:342)
 org.ofbiz.service.ServiceDispatcher.runSync(ServiceDispatcher.java:213)
 org.ofbiz.service.GenericDispatcher.runSync(GenericDispatcher.java:163)
 The system is failing in the following service:

 service name=acctgTransactionPermissionCheck engine=simple

  
 location=component://accounting/script/org/ofbiz/accounting/permissions/PermissionServices.xml
 invoke=acctgTransactionPermissionCheck
descriptionBasic General Ledger Permission Checking
 Logic/description
implements service=permissionInterface/
/service

 which in turn invokes

 !-- Returns hasPermission=true if user has one of the ACCTG_ATX CRUD+ADMIN
 permissions --
simple-method method-name=acctgTransactionPermissionCheck
 short-description=Accounting transaction permission logic
set field=primaryPermission value=ACCTG_ATX/
call-simple-method method-name=genericBasePermissionCheck
 xml-resource=component://common/script/org/ofbiz/common/permission/CommonPermissionServices.xml/
/simple-method

Web User Permissions

2009-05-17 Thread Alan

Hi

I am having problems with updating ledgers when web users pay for goods.

I sure the problem is configuration but I don't know where. All help
greatly appreciated.

Also, I'm not clear on how new users are assigned the ACCTG_ATX
permissions.

Alan

The log message is 
2009-05-17 19:51:17,700 (TP-Processor14) [
ServiceDispatcher.java:500:ERROR] 
 exception report
--
Service [createAcctgTransAndEntries] threw an unexpected exception/error
Exception: org.ofbiz.service.ServiceAuthException
Message: Security Error: To run createAcctgTransAndEntries you must have
the one of the following permissions: ACCTG_ATX_CREATE, ACCTG_ATX_ADMIN
 stack trace
---
org.ofbiz.service.ServiceAuthException: Security Error: To run
createAcctgTransAndEntries you must have the one of the following
permissions: ACCTG_ATX_CREATE, ACCTG_ATX_ADMIN
org.ofbiz.service.ServiceDispatcher.checkAuth(ServiceDispatcher.java:908)
org.ofbiz.service.ServiceDispatcher.runSync(ServiceDispatcher.java:342)
org.ofbiz.service.ServiceDispatcher.runSync(ServiceDispatcher.java:213)
org.ofbiz.service.GenericDispatcher.runSync(GenericDispatcher.java:163)
The system is failing in the following service:

service name=acctgTransactionPermissionCheck engine=simple

location=component://accounting/script/org/ofbiz/accounting/permissions/PermissionServices.xml
 invoke=acctgTransactionPermissionCheck
descriptionBasic General Ledger Permission Checking 
Logic/description
implements service=permissionInterface/
/service

which in turn invokes

!-- Returns hasPermission=true if user has one of the ACCTG_ATX CRUD+ADMIN 
permissions --
simple-method method-name=acctgTransactionPermissionCheck 
short-description=Accounting transaction permission logic
set field=primaryPermission value=ACCTG_ATX/
call-simple-method method-name=genericBasePermissionCheck 
xml-resource=component://common/script/org/ofbiz/common/permission/CommonPermissionServices.xml/
/simple-method

Re: Security and Permissions

2009-05-01 Thread Alan

Hi

We are running V4.0

Alan

On Wed, 2009-04-29 at 13:39 -0700, BJ Freeman wrote:
 what version of ofbiz are you using
 Trunk (version #)
 release 9.04
 Release 4.0
 
 
 Alan sent the following on 4/29/2009 1:23 PM:
  Hi
  
  I am having trouble with security and permissions on a webapp. My
  understanding is that I have to associate new customers with permissions
  to make ledger entries (specifically ACCTG_ATX_CREATE, ACCTG_ATX_ADMIN).
  This concerns me as AccountingSecurityData.xml says these should be
  given only to accountants.
  
  However, I need some help in assigning these permissions to the Customer
  role as defined in CustomerEvents.xml in the line 
  
  set value=CUSTOMER field=parameters.roleTypeId/
  
  Any help or pointers gratefully appreciated.
  
  TIA
  
  Alan

Re: Security and Permissions

2009-04-30 Thread Jacques Le Roux


This may help, http://docs.ofbiz.org/display/OFBTECH/OFBiz+security
but beware some changes are going on in this area 
https://issues.apache.org/jira/browse/OFBIZ-2380

Jacques

From: Alan ahal...@mercatx.co.uk

Hi

I am having trouble with security and permissions on a webapp. My
understanding is that I have to associate new customers with permissions
to make ledger entries (specifically ACCTG_ATX_CREATE, ACCTG_ATX_ADMIN).
This concerns me as AccountingSecurityData.xml says these should be
given only to accountants.

However, I need some help in assigning these permissions to the Customer
role as defined in CustomerEvents.xml in the line 


set value=CUSTOMER field=parameters.roleTypeId/

Any help or pointers gratefully appreciated.

TIA

Alan

Re: Security and Permissions

2009-04-29 Thread BJ Freeman

what version of ofbiz are you using
Trunk (version #)
release 9.04
Release 4.0


Alan sent the following on 4/29/2009 1:23 PM:
 Hi
 
 I am having trouble with security and permissions on a webapp. My
 understanding is that I have to associate new customers with permissions
 to make ledger entries (specifically ACCTG_ATX_CREATE, ACCTG_ATX_ADMIN).
 This concerns me as AccountingSecurityData.xml says these should be
 given only to accountants.
 
 However, I need some help in assigning these permissions to the Customer
 role as defined in CustomerEvents.xml in the line 
 
 set value=CUSTOMER field=parameters.roleTypeId/
 
 Any help or pointers gratefully appreciated.
 
 TIA
 
 Alan
 
 
 

-- 
BJ Freeman
http://www.businessesnetwork.com/automation
http://bjfreeman.elance.com
http://www.linkedin.com/profile?viewProfile=key=1237480locale=en_UStrk=tab_pro
Systems Integrator.

Permissions Issue with Web Customers

2009-04-25 Thread Alan

Hi

We use the webapp but at the end of each sale we get the following error
message.

I suspect I have a configuration error somewhere to do with permissions
being allocated to new customers but don't know where.

Any help would be appreciated.

Alan Halley


2009-04-21 13:05:16,751 (TP-Processor18) [
Log.java:100:INFO ] Checking for primary permission ACCTG_ATX_CREATE
2009-04-21 13:05:16,752 (TP-Processor18) [
ServiceDispatcher.java:578:INFO ] Sync service
[ecommerce/acctgTransactionPermissionCheck] finished in [69]
milliseconds
2009-04-21 13:05:16,753 (TP-Processor18) [
ServiceDispatcher.java:497:INFO ] [[Sync service failed...-
total:0.0,since last(Begin):0.0]] - 'ecommerce /
createAcctgTransAndEntries'
2009-04-21 13:05:16,811 (TP-Processor18) [
ServiceDispatcher.java:500:ERROR] 
 exception report
--
Service [createAcctgTransAndEntries] threw an unexpected exception/error
Exception: org.ofbiz.service.ServiceAuthException
Message: Security Error: To run createAcctgTransAndEntries you must have
the one of the following permissions: ACCTG_ATX_CREATE, ACCTG_ATX_ADMIN
 stack trace
---
org.ofbiz.service.ServiceAuthException: Security Error: To run
createAcctgTransAndEntries you must have the one of the following
permissions: ACCTG_ATX_CREATE, ACCTG_ATX_ADMIN
org.ofbiz.service.ServiceDispatcher.checkAuth(ServiceDispatcher.java:908)
org.ofbiz.service.ServiceDispatcher.runSync(ServiceDispatcher.java:342)
org.ofbiz.service.ServiceDispatcher.runSync(ServiceDispatcher.java:213)
org.ofbiz.service.GenericDispatcher.runSync(GenericDispatcher.java:163)
org.ofbiz.minilang.method.callops.CallService.exec(CallService.java:245)
org.ofbiz.minilang.SimpleMethod.runSubOps(SimpleMethod.java:921)

Newly created user and permissions

2009-01-05 Thread masionas


I have created a new user with ORDER_ENTRYALL profile. And when I tried to
login with it to ordermanager it told me:

The Following Errors Occurred:

Login for this application couldn't be completed (required permissions
missing).

However, if I restart ofbiz then it logins with no problem. So looks like
for newly created user the permissions are not applied unless you restart an
app. Anything I can do about it? I would appreciate any ideas on it. Thank
you guys.

-- 
View this message in context: 
http://www.nabble.com/Newly-created-user-and-permissions-tp21296274p21296274.html
Sent from the OFBiz - User mailing list archive at Nabble.com.

Re: Newly created user and permissions

2009-01-05 Thread David E Jones



Take a look at the cache.properties file. You'll see that permissions  
take up to 1/2 hour to take effect if a previous setting (including no  
permission) has been cached.


-David


On Jan 5, 2009, at 10:20 AM, masionas wrote:



I have created a new user with ORDER_ENTRYALL profile. And when I  
tried to

login with it to ordermanager it told me:

The Following Errors Occurred:

Login for this application couldn't be completed (required permissions
missing).

However, if I restart ofbiz then it logins with no problem. So looks  
like
for newly created user the permissions are not applied unless you  
restart an
app. Anything I can do about it? I would appreciate any ideas on it.  
Thank

you guys.

--
View this message in context: 
http://www.nabble.com/Newly-created-user-and-permissions-tp21296274p21296274.html
Sent from the OFBiz - User mailing list archive at Nabble.com.

Re: Newly created user and permissions

2009-01-05 Thread masionas


Thank you, David. That does the trick I think.


David E Jones-3 wrote:
 
 
 Take a look at the cache.properties file. You'll see that permissions  
 take up to 1/2 hour to take effect if a previous setting (including no  
 permission) has been cached.
 
 -David
 
 
 On Jan 5, 2009, at 10:20 AM, masionas wrote:
 

 I have created a new user with ORDER_ENTRYALL profile. And when I  
 tried to
 login with it to ordermanager it told me:

 The Following Errors Occurred:

 Login for this application couldn't be completed (required permissions
 missing).

 However, if I restart ofbiz then it logins with no problem. So looks  
 like
 for newly created user the permissions are not applied unless you  
 restart an
 app. Anything I can do about it? I would appreciate any ideas on it.  
 Thank
 you guys.

 -- 
 View this message in context:
 http://www.nabble.com/Newly-created-user-and-permissions-tp21296274p21296274.html
 Sent from the OFBiz - User mailing list archive at Nabble.com.

 
 
 

-- 
View this message in context: 
http://www.nabble.com/Newly-created-user-and-permissions-tp21296274p21296727.html
Sent from the OFBiz - User mailing list archive at Nabble.com.

Re: User login set up, (required permissions missing)

2008-08-24 Thread Scott Gray

Hi Todd

The base-permission list is ANDed so the OFBTOOLS permission is
required as well.

Regards
Scott

2008/8/25 Todd Burdeinei [EMAIL PROTECTED]:
 Hello,
 I got stuck when trying to create a user group- searched the lists but
 didn't find anything that worked.

 I created a user group, PRODUCTION.
 I set this groups role as ADMIN
 In this group, there is a user called Jay, with the security group PROD_1
 I have created a security group called PROD_1 with the security group
 permissions:
 MANUFACTURING_ADMIN ALL operations in the Manufacturing Manager.

 I have checked the ofbiz-component.xml for permissions and it shows

  webapp name=manufacturing
title=Manufacturing
server=default-server
location=webapp/manufacturing
base-permission=OFBTOOLS,MANUFACTURING
mount-point=/manufacturing/

 When I try to login as Jay I still get the 'required permissions missing'
 message
 What am I missing?

 many thanks
 --
 Todd

Re: Re: how to set security and permissions precedence]

2008-08-07 Thread Jacques Le Roux


Milind,

I did not look into details but don't you think these informations should not 
be better in Wiki ?
Like http://docs.ofbiz.org/x/UBE 
Then I'd suggest to create a hat page for tutorials...


Thanks

Jacques

From: Milind W [EMAIL PROTECTED]

Thank you! Jacques. Feedback and the quicker path to learn, is all I am
looking for.
David there was no intention to offend and hope none was taken.
BJ Thanks for answering my questions patiently and looking at my files.

Here is a tutorial I have written for login.

http://www.enterprisebeacon.com/ofbiz/tutorials/fundamentals/logintutorial/

If somone can try it out and let me know if there are any omissions,
corrections or additions and also feel free to use as necessary.


From: BJ Freeman [EMAIL PROTECTED]

I have heard others say how they benefited from the videos, and others
that say they did not.
I can not attest either way.
Again the ones that did not, are not here now, the ones that did are
still part of the community and contributing.

my main contribution is on the is mailing list. I figure the more people
that know and contribute, the more benefit.  I just hope to set a tone
that others will adopt.


There are 2 kind of videos,
. Seminar,  most are old now and of little value, but could be still
interesting on some aspects, mostly the more recent.
. Advanced Framework which are fairly recent and anyway fundamental (ie
not much sensitive to changes). If you don't want to spend
money you could use only the Advanced Framework Transcription
http://docs.ofbiz.org/pages/viewpageattachments.action?pageId=4369 (at
least to evaluate your need) or wait video to be freely available. But
IMHO they are a very valuable source of multiple informations
: a course is not a book (especially if it's courses transcription).

Note that I do not earn anything from these videos done by David. I bought
them when they were published and I don't regret my
investment, in time and money !

Note also that the minilang documentation (available from auto-completion
feature of XML editor) I did last year is mostly coming
from this source...

Jacques

[Fwd: Re: how to set security and permissions precedence]

2008-08-06 Thread Milind W

Thank you! Jacques. Feedback and the quicker path to learn, is all I am
looking for.
David there was no intention to offend and hope none was taken.
BJ Thanks for answering my questions patiently and looking at my files.

Here is a tutorial I have written for login.

http://www.enterprisebeacon.com/ofbiz/tutorials/fundamentals/logintutorial/

If somone can try it out and let me know if there are any omissions,
corrections or additions and also feel free to use as necessary.

 From: BJ Freeman [EMAIL PROTECTED]
 I have heard others say how they benefited from the videos, and others
 that say they did not.
 I can not attest either way.
 Again the ones that did not, are not here now, the ones that did are
 still part of the community and contributing.

 my main contribution is on the is mailing list. I figure the more people
 that know and contribute, the more benefit.  I just hope to set a tone
 that others will adopt.

 There are 2 kind of videos,
 . Seminar,  most are old now and of little value, but could be still
 interesting on some aspects, mostly the more recent.
 . Advanced Framework which are fairly recent and anyway fundamental (ie
 not much sensitive to changes). If you don't want to spend
 money you could use only the Advanced Framework Transcription
 http://docs.ofbiz.org/pages/viewpageattachments.action?pageId=4369 (at
 least to evaluate your need) or wait video to be freely available. But
 IMHO they are a very valuable source of multiple informations
 : a course is not a book (especially if it's courses transcription).

 Note that I do not earn anything from these videos done by David. I bought
 them when they were published and I don't regret my
 investment, in time and money !

 Note also that the minilang documentation (available from auto-completion
 feature of XML editor) I did last year is mostly coming
 from this source...

 Jacques

Re: how to set security and permissions precedence

2008-08-05 Thread David E Jones

:INFO ] [Processing Request]: main
sessionId=B2364C2D58837E9163B9B9214E2228FA.jvm1
2008-08-03 16:15:04,515 (http-0.0.0.0-8080-1)
[RequestHandler.java:433:INFO ] [RequestHandler.doRequest]:
Response
is
a
view. sessionId=B2364C2D58837E9163B9B9214E2228FA.jvm1
2008-08-03 16:15:04,515 (http-0.0.0.0-8080-1)
[RequestHandler.java:584:INFO ] servletName=control, view=main
sessionId=B2364C2D58837E9163B9B9214E2228FA.jvm1
2008-08-03 16:15:04,515 (http-0.0.0.0-8080-1) [
UtilJ2eeCompat.java:69
:INFO ] serverInfo: apache tomcat/6.0.16
2008-08-03 16:15:04,515 (http-0.0.0.0-8080-1) [
UtilJ2eeCompat.java:78
:INFO ] Apache Tomcat detected, using response.getWriter to  
write

text
out
instead of response.getOutputStream

and with rev#677863
2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
RequestHandler.java:236:INFO ] [Processing Request]: main
sessionId=72EE22303A9A4DCDB76F64EE41F963DA.jvm1
2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
LoginWorker.java:262:INFO ] reqParams Map: []
2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
LoginWorker.java:263:INFO ] queryString:
2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
LoginWorker.java:273:INFO ] checkLogin: queryString=
2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
LoginWorker.java:274:INFO ] checkLogin: PathInfo=/main
2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
RequestHandler.java:425:INFO ] [RequestHandler.doRequest]:
Response
is
a
view. sessionId=72EE22303A9A4DCDB76F64EE41F963DA.jvm1
2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
RequestHandler.java:578:INFO ] servletName=control, view=login
sessionId=72EE22303A9A4DCDB76F64EE41F963DA.jvm1
2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
UtilJ2eeCompat.java:69 :INFO ] serverInfo: Apache Tomcat/ 
5.5.20

2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
UtilJ2eeCompat.java:78 :INFO ] Apache Tomcat detected, using
response.getWriter to write text out instead of
response.getOutputStream

The loginworker seems to be invoked with rev#677863 and not  
with

rev#679258.
Any Idea?


Did you try an ant clean ? There have been some changes
recently
that
implie this cleanup.

Jacques

From: Milind W [EMAIL PROTECTED]

Looks like I have a problem making this example work with
revision#679258

It worked fine (i.e I was redirected to login screen  
before I

could
get
to
main) with rev#677863

Looks like the view
view-map name=login type=screen
page=component://marketing/widget/ 
CommonScreens.xml#login /
is part of the problem. The CommonScreens.xml has moved  
and does

no
longer
seem to have the 'login' screen.

I tried finding another screen with the 'login' view. I  
found

another
one
in the 'common' component and modified my hello controller  
to

point
to
view-map name=login type=screen
page=component://common/widget/CommonScreens.xml#login/
but it is no acting the same as previously.

Please let me know what is missing (or any suggestion how  
best

to
illustrate login) so I can complete and contribute my  
tutorial

for
security. Would hate to create a tutorial that worked with  
one

specific
build.

http://ofbiz.markmail.org/search/?q=Milind+W#query:Milind 
%20W+page:2+mid:kwgcnrsxjigfilp2+state:results


Thanks
-Milind


hi,
I got login to work by adding the changes below to my
controller
using
ofbiz4.0.
I don't think I follow the reason with OFBTOOLS base
persmission
not
taking effect in the ofbiz-component as explained in  
OFBIZ-829.

But I agree with Si Chen on OFBIZ-829
The right way is to assume no permission until one of  
the list

of
permissions is met. Seems more intitutive.
For now I can workaround it so thanks all.
-Milind



preprocessor
   !-- Events to run on every request before security
(chains
exempt) --
   !-- event type=java
path=org.ofbiz.webapp.event.TestEvent
invoke=test/ --
   event type=java
path=org.ofbiz.webapp.control.LoginWorker
invoke=checkExternalLoginKey/
   /preprocessor

!-- Request Mappings --

 request-map uri=checkLogin edit=false
   descriptionVerify a user is logged in./ 
description

   security https=false auth=false/
   event type=java
path=org.ofbiz.webapp.control.LoginWorker
invoke=checkLogin /
   response name=success type=view value=main /
   response name=error type=view value=login /
   /request-map

   request-map uri=login
   security https=false auth=false/
   event type=java
path=org.ofbiz.webapp.control.LoginWorker
invoke=login/
   response name=success type=view value=main/
   response name=error type=view value=login/
   /request-map


request-map uri=main
security https=false auth=true /
response name=success type=view value=main/
/request-map

view-map name=login type=screen
page=component://marketing/widget/ 
CommonScreens.xml#login /



Not with a direct link to the comment where is the  
explanation

;p
Actually it was more a didactic post

Jacques

From: BJ Freeman [EMAIL PROTECTED]

LOL
that was the first link I sent on this thread

Re: how to set security and permissions precedence

2008-08-05 Thread BJ Freeman

 no difference.
 I can proceed to main without being redirected to login with
 rev#679258.


 Relevant log for rev#679258
 2008-08-03 16:15:04,515 (http-0.0.0.0-8080-1)
 [RequestHandler.java:243:INFO ] [Processing Request]: main
 sessionId=B2364C2D58837E9163B9B9214E2228FA.jvm1
 2008-08-03 16:15:04,515 (http-0.0.0.0-8080-1)
 [RequestHandler.java:433:INFO ] [RequestHandler.doRequest]:
 Response
 is
 a
 view. sessionId=B2364C2D58837E9163B9B9214E2228FA.jvm1
 2008-08-03 16:15:04,515 (http-0.0.0.0-8080-1)
 [RequestHandler.java:584:INFO ] servletName=control, view=main
 sessionId=B2364C2D58837E9163B9B9214E2228FA.jvm1
 2008-08-03 16:15:04,515 (http-0.0.0.0-8080-1) [
 UtilJ2eeCompat.java:69
 :INFO ] serverInfo: apache tomcat/6.0.16
 2008-08-03 16:15:04,515 (http-0.0.0.0-8080-1) [
 UtilJ2eeCompat.java:78
 :INFO ] Apache Tomcat detected, using response.getWriter to write
 text
 out
 instead of response.getOutputStream

 and with rev#677863
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 RequestHandler.java:236:INFO ] [Processing Request]: main
 sessionId=72EE22303A9A4DCDB76F64EE41F963DA.jvm1
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 LoginWorker.java:262:INFO ] reqParams Map: []
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 LoginWorker.java:263:INFO ] queryString:
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 LoginWorker.java:273:INFO ] checkLogin: queryString=
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 LoginWorker.java:274:INFO ] checkLogin: PathInfo=/main
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 RequestHandler.java:425:INFO ] [RequestHandler.doRequest]:
 Response
 is
 a
 view. sessionId=72EE22303A9A4DCDB76F64EE41F963DA.jvm1
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 RequestHandler.java:578:INFO ] servletName=control, view=login
 sessionId=72EE22303A9A4DCDB76F64EE41F963DA.jvm1
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 UtilJ2eeCompat.java:69 :INFO ] serverInfo: Apache Tomcat/5.5.20
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 UtilJ2eeCompat.java:78 :INFO ] Apache Tomcat detected, using
 response.getWriter to write text out instead of
 response.getOutputStream

 The loginworker seems to be invoked with rev#677863 and not with
 rev#679258.
 Any Idea?

 Did you try an ant clean ? There have been some changes
 recently
 that
 implie this cleanup.

 Jacques

 From: Milind W [EMAIL PROTECTED]
 Looks like I have a problem making this example work with
 revision#679258

 It worked fine (i.e I was redirected to login screen before I
 could
 get
 to
 main) with rev#677863

 Looks like the view
 view-map name=login type=screen
 page=component://marketing/widget/CommonScreens.xml#login /
 is part of the problem. The CommonScreens.xml has moved and does
 no
 longer
 seem to have the 'login' screen.

 I tried finding another screen with the 'login' view. I found
 another
 one
 in the 'common' component and modified my hello controller to
 point
 to
 view-map name=login type=screen
 page=component://common/widget/CommonScreens.xml#login/
 but it is no acting the same as previously.

 Please let me know what is missing (or any suggestion how best
 to
 illustrate login) so I can complete and contribute my tutorial
 for
 security. Would hate to create a tutorial that worked with one
 specific
 build.

 http://ofbiz.markmail.org/search/?q=Milind+W#query:Milind%20W+page:2+mid:kwgcnrsxjigfilp2+state:results

 Thanks
 -Milind

 hi,
 I got login to work by adding the changes below to my
 controller
 using
 ofbiz4.0.
 I don't think I follow the reason with OFBTOOLS base
 persmission
 not
 taking effect in the ofbiz-component as explained in OFBIZ-829.
 But I agree with Si Chen on OFBIZ-829
 The right way is to assume no permission until one of the list
 of
 permissions is met. Seems more intitutive.
 For now I can workaround it so thanks all.
 -Milind



 preprocessor
 !-- Events to run on every request before security
 (chains
 exempt) --
 !-- event type=java
 path=org.ofbiz.webapp.event.TestEvent
 invoke=test/ --
 event type=java
 path=org.ofbiz.webapp.control.LoginWorker
 invoke=checkExternalLoginKey/
 /preprocessor

 !-- Request Mappings --

   request-map uri=checkLogin edit=false
 descriptionVerify a user is logged in./description
 security https=false auth=false/
 event type=java
 path=org.ofbiz.webapp.control.LoginWorker
 invoke=checkLogin /
 response name=success type=view value=main /
 response name=error type=view value=login /
 /request-map

 request-map uri=login
 security https=false auth=false/
 event type=java
 path=org.ofbiz.webapp.control.LoginWorker
 invoke=login/
 response name=success type=view value=main/
 response name=error type=view value=login/
 /request-map


 request-map uri=main
 security https=false auth=true /
 response name=success type=view value=main/
 /request-map

 view-map

Re: how to set security and permissions precedence

2008-08-05 Thread Jacques Le Roux

 described in my previous email.
I am attaching my controller.xml


here is the fix
http://svn.apache.org/viewvc?rev=682228view=rev

Milind W sent the following on 8/3/2008 4:27 PM:

Just tried ant clean it made no difference.
I can proceed to main without being redirected to login with
rev#679258.


Relevant log for rev#679258
2008-08-03 16:15:04,515 (http-0.0.0.0-8080-1)
[RequestHandler.java:243:INFO ] [Processing Request]: main
sessionId=B2364C2D58837E9163B9B9214E2228FA.jvm1
2008-08-03 16:15:04,515 (http-0.0.0.0-8080-1)
[RequestHandler.java:433:INFO ] [RequestHandler.doRequest]:
Response
is
a
view. sessionId=B2364C2D58837E9163B9B9214E2228FA.jvm1
2008-08-03 16:15:04,515 (http-0.0.0.0-8080-1)
[RequestHandler.java:584:INFO ] servletName=control, view=main
sessionId=B2364C2D58837E9163B9B9214E2228FA.jvm1
2008-08-03 16:15:04,515 (http-0.0.0.0-8080-1) [
UtilJ2eeCompat.java:69
:INFO ] serverInfo: apache tomcat/6.0.16
2008-08-03 16:15:04,515 (http-0.0.0.0-8080-1) [
UtilJ2eeCompat.java:78
:INFO ] Apache Tomcat detected, using response.getWriter to  write
text
out
instead of response.getOutputStream

and with rev#677863
2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
RequestHandler.java:236:INFO ] [Processing Request]: main
sessionId=72EE22303A9A4DCDB76F64EE41F963DA.jvm1
2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
LoginWorker.java:262:INFO ] reqParams Map: []
2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
LoginWorker.java:263:INFO ] queryString:
2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
LoginWorker.java:273:INFO ] checkLogin: queryString=
2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
LoginWorker.java:274:INFO ] checkLogin: PathInfo=/main
2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
RequestHandler.java:425:INFO ] [RequestHandler.doRequest]:
Response
is
a
view. sessionId=72EE22303A9A4DCDB76F64EE41F963DA.jvm1
2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
RequestHandler.java:578:INFO ] servletName=control, view=login
sessionId=72EE22303A9A4DCDB76F64EE41F963DA.jvm1
2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
UtilJ2eeCompat.java:69 :INFO ] serverInfo: Apache Tomcat/ 5.5.20
2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
UtilJ2eeCompat.java:78 :INFO ] Apache Tomcat detected, using
response.getWriter to write text out instead of
response.getOutputStream

The loginworker seems to be invoked with rev#677863 and not  with
rev#679258.
Any Idea?


Did you try an ant clean ? There have been some changes
recently
that
implie this cleanup.

Jacques

From: Milind W [EMAIL PROTECTED]

Looks like I have a problem making this example work with
revision#679258

It worked fine (i.e I was redirected to login screen  before I
could
get
to
main) with rev#677863

Looks like the view
view-map name=login type=screen
page=component://marketing/widget/ CommonScreens.xml#login /
is part of the problem. The CommonScreens.xml has moved  and does
no
longer
seem to have the 'login' screen.

I tried finding another screen with the 'login' view. I  found
another
one
in the 'common' component and modified my hello controller  to
point
to
view-map name=login type=screen
page=component://common/widget/CommonScreens.xml#login/
but it is no acting the same as previously.

Please let me know what is missing (or any suggestion how  best
to
illustrate login) so I can complete and contribute my  tutorial
for
security. Would hate to create a tutorial that worked with  one
specific
build.

http://ofbiz.markmail.org/search/?q=Milind+W#query:Milind 
%20W+page:2+mid:kwgcnrsxjigfilp2+state:results

Thanks
-Milind


hi,
I got login to work by adding the changes below to my
controller
using
ofbiz4.0.
I don't think I follow the reason with OFBTOOLS base
persmission
not
taking effect in the ofbiz-component as explained in  OFBIZ-829.
But I agree with Si Chen on OFBIZ-829
The right way is to assume no permission until one of  the list
of
permissions is met. Seems more intitutive.
For now I can workaround it so thanks all.
-Milind



preprocessor
   !-- Events to run on every request before security
(chains
exempt) --
   !-- event type=java
path=org.ofbiz.webapp.event.TestEvent
invoke=test/ --
   event type=java
path=org.ofbiz.webapp.control.LoginWorker
invoke=checkExternalLoginKey/
   /preprocessor

!-- Request Mappings --

 request-map uri=checkLogin edit=false
   descriptionVerify a user is logged in./ description
   security https=false auth=false/
   event type=java
path=org.ofbiz.webapp.control.LoginWorker
invoke=checkLogin /
   response name=success type=view value=main /
   response name=error type=view value=login /
   /request-map

   request-map uri=login
   security https=false auth=false/
   event type=java
path=org.ofbiz.webapp.control.LoginWorker
invoke=login/
   response name=success type=view value=main/
   response name=error type=view value=login/
   /request-map


request-map uri=main
security https

Re: how to set security and permissions precedence

2008-08-05 Thread Jacques Le Roux


From: BJ Freeman [EMAIL PROTECTED]

I have heard others say how they benefited from the videos, and others
that say they did not.
I can not attest either way.
Again the ones that did not, are not here now, the ones that did are
still part of the community and contributing.

my main contribution is on the is mailing list. I figure the more people
that know and contribute, the more benefit.  I just hope to set a tone
that others will adopt.


There are 2 kind of videos,
. Seminar,  most are old now and of little value, but could be still 
interesting on some aspects, mostly the more recent.
. Advanced Framework which are fairly recent and anyway fundamental (ie not 
much sensitive to changes). If you don't want to spend
money you could use only the Advanced Framework Transcription 
http://docs.ofbiz.org/pages/viewpageattachments.action?pageId=4369 (at
least to evaluate your need) or wait video to be freely available. But IMHO 
they are a very valuable source of multiple informations
: a course is not a book (especially if it's courses transcription).

Note that I do not earn anything from these videos done by David. I bought them 
when they were published and I don't regret my
investment, in time and money !

Note also that the minilang documentation (available from auto-completion feature of XML editor) I did last year is mostly coming 
from this source...


Jacques

Re: how to set security and permissions precedence

2008-08-05 Thread BJ Freeman


 Milind W sent the following on 8/3/2008 4:27 PM:
 Just tried ant clean it made no difference.
 I can proceed to main without being redirected to login with
 rev#679258.


 Relevant log for rev#679258
 2008-08-03 16:15:04,515 (http-0.0.0.0-8080-1)
 [RequestHandler.java:243:INFO ] [Processing Request]: main
 sessionId=B2364C2D58837E9163B9B9214E2228FA.jvm1
 2008-08-03 16:15:04,515 (http-0.0.0.0-8080-1)
 [RequestHandler.java:433:INFO ] [RequestHandler.doRequest]:
 Response
 is
 a
 view. sessionId=B2364C2D58837E9163B9B9214E2228FA.jvm1
 2008-08-03 16:15:04,515 (http-0.0.0.0-8080-1)
 [RequestHandler.java:584:INFO ] servletName=control, view=main
 sessionId=B2364C2D58837E9163B9B9214E2228FA.jvm1
 2008-08-03 16:15:04,515 (http-0.0.0.0-8080-1) [
 UtilJ2eeCompat.java:69
 :INFO ] serverInfo: apache tomcat/6.0.16
 2008-08-03 16:15:04,515 (http-0.0.0.0-8080-1) [
 UtilJ2eeCompat.java:78
 :INFO ] Apache Tomcat detected, using response.getWriter to write
 text
 out
 instead of response.getOutputStream

 and with rev#677863
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 RequestHandler.java:236:INFO ] [Processing Request]: main
 sessionId=72EE22303A9A4DCDB76F64EE41F963DA.jvm1
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 LoginWorker.java:262:INFO ] reqParams Map: []
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 LoginWorker.java:263:INFO ] queryString:
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 LoginWorker.java:273:INFO ] checkLogin: queryString=
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 LoginWorker.java:274:INFO ] checkLogin: PathInfo=/main
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 RequestHandler.java:425:INFO ] [RequestHandler.doRequest]:
 Response
 is
 a
 view. sessionId=72EE22303A9A4DCDB76F64EE41F963DA.jvm1
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 RequestHandler.java:578:INFO ] servletName=control, view=login
 sessionId=72EE22303A9A4DCDB76F64EE41F963DA.jvm1
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 UtilJ2eeCompat.java:69 :INFO ] serverInfo: Apache Tomcat/5.5.20
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 UtilJ2eeCompat.java:78 :INFO ] Apache Tomcat detected, using
 response.getWriter to write text out instead of
 response.getOutputStream

 The loginworker seems to be invoked with rev#677863 and not with
 rev#679258.
 Any Idea?

 Did you try an ant clean ? There have been some changes
 recently
 that
 implie this cleanup.

 Jacques

 From: Milind W [EMAIL PROTECTED]
 Looks like I have a problem making this example work with
 revision#679258

 It worked fine (i.e I was redirected to login screen before I
 could
 get
 to
 main) with rev#677863

 Looks like the view
 view-map name=login type=screen
 page=component://marketing/widget/CommonScreens.xml#login /
 is part of the problem. The CommonScreens.xml has moved and
 does
 no
 longer
 seem to have the 'login' screen.

 I tried finding another screen with the 'login' view. I found
 another
 one
 in the 'common' component and modified my hello controller to
 point
 to
 view-map name=login type=screen
 page=component://common/widget/CommonScreens.xml#login/
 but it is no acting the same as previously.

 Please let me know what is missing (or any suggestion how best
 to
 illustrate login) so I can complete and contribute my tutorial
 for
 security. Would hate to create a tutorial that worked with one
 specific
 build.

 http://ofbiz.markmail.org/search/?q=Milind+W#query:Milind%20W+page:2+mid:kwgcnrsxjigfilp2+state:results


 Thanks
 -Milind

 hi,
 I got login to work by adding the changes below to my
 controller
 using
 ofbiz4.0.
 I don't think I follow the reason with OFBTOOLS base
 persmission
 not
 taking effect in the ofbiz-component as explained in
 OFBIZ-829.
 But I agree with Si Chen on OFBIZ-829
 The right way is to assume no permission until one of the
 list
 of
 permissions is met. Seems more intitutive.
 For now I can workaround it so thanks all.
 -Milind



 preprocessor
!-- Events to run on every request before security
 (chains
 exempt) --
!-- event type=java
 path=org.ofbiz.webapp.event.TestEvent
 invoke=test/ --
event type=java
 path=org.ofbiz.webapp.control.LoginWorker
 invoke=checkExternalLoginKey/
/preprocessor

 !-- Request Mappings --

  request-map uri=checkLogin edit=false
descriptionVerify a user is logged in./description
security https=false auth=false/
event type=java
 path=org.ofbiz.webapp.control.LoginWorker
 invoke=checkLogin /
response name=success type=view value=main /
response name=error type=view value=login /
/request-map

request-map uri=login
security https=false auth=false/
event type=java
 path=org.ofbiz.webapp.control.LoginWorker
 invoke=login/
response name=success type=view value=main/
response name=error type=view value=login/
/request-map


 request-map uri=main
 security https=false auth=true

Re: how to set security and permissions precedence

I changed my controller to conform with the example controller.xml.
Now it does attempt to send me to the login screen but get the following
error.

org.ofbiz.widget.screen.ScreenRenderException: Error rendering screen
[component://common/widget/CommonScreens.xml#login]:
java.lang.IllegalArgumentException: Could not find screen with name
[main-decorator] in the same file as the screen with name [login] (Could
not find screen with name [main-decorator] in the same file as the screen
with name [login])

Help!
 your controller does not conform to the current svn controllers.
 please review them.


 Milind W sent the following on 8/3/2008 5:35 PM:
 I got the updated files.
 Did ant clean and then a new build.
 I still see the SAME behavior described in my previous email.
 I am attaching my controller.xml

 here is the fix
 http://svn.apache.org/viewvc?rev=682228view=rev

 Milind W sent the following on 8/3/2008 4:27 PM:
 Just tried ant clean it made no difference.
 I can proceed to main without being redirected to login with
 rev#679258.


 Relevant log for rev#679258
 2008-08-03 16:15:04,515 (http-0.0.0.0-8080-1)
 [RequestHandler.java:243:INFO ] [Processing Request]: main
 sessionId=B2364C2D58837E9163B9B9214E2228FA.jvm1
 2008-08-03 16:15:04,515 (http-0.0.0.0-8080-1)
 [RequestHandler.java:433:INFO ] [RequestHandler.doRequest]: Response
 is
 a
 view. sessionId=B2364C2D58837E9163B9B9214E2228FA.jvm1
 2008-08-03 16:15:04,515 (http-0.0.0.0-8080-1)
 [RequestHandler.java:584:INFO ] servletName=control, view=main
 sessionId=B2364C2D58837E9163B9B9214E2228FA.jvm1
 2008-08-03 16:15:04,515 (http-0.0.0.0-8080-1) [
 UtilJ2eeCompat.java:69
 :INFO ] serverInfo: apache tomcat/6.0.16
 2008-08-03 16:15:04,515 (http-0.0.0.0-8080-1) [
 UtilJ2eeCompat.java:78
 :INFO ] Apache Tomcat detected, using response.getWriter to write text
 out
 instead of response.getOutputStream

 and with rev#677863
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 RequestHandler.java:236:INFO ] [Processing Request]: main
 sessionId=72EE22303A9A4DCDB76F64EE41F963DA.jvm1
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 LoginWorker.java:262:INFO ] reqParams Map: []
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 LoginWorker.java:263:INFO ] queryString:
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 LoginWorker.java:273:INFO ] checkLogin: queryString=
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 LoginWorker.java:274:INFO ] checkLogin: PathInfo=/main
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 RequestHandler.java:425:INFO ] [RequestHandler.doRequest]: Response is
 a
 view. sessionId=72EE22303A9A4DCDB76F64EE41F963DA.jvm1
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 RequestHandler.java:578:INFO ] servletName=control, view=login
 sessionId=72EE22303A9A4DCDB76F64EE41F963DA.jvm1
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 UtilJ2eeCompat.java:69 :INFO ] serverInfo: Apache Tomcat/5.5.20
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 UtilJ2eeCompat.java:78 :INFO ] Apache Tomcat detected, using
 response.getWriter to write text out instead of
 response.getOutputStream

 The loginworker seems to be invoked with rev#677863 and not with
 rev#679258.
 Any Idea?

 Did you try an ant clean ? There have been some changes recently
 that
 implie this cleanup.

 Jacques

 From: Milind W [EMAIL PROTECTED]
 Looks like I have a problem making this example work with
 revision#679258

 It worked fine (i.e I was redirected to login screen before I could
 get
 to
 main) with rev#677863

 Looks like the view
 view-map name=login type=screen
 page=component://marketing/widget/CommonScreens.xml#login /
 is part of the problem. The CommonScreens.xml has moved and does no
 longer
 seem to have the 'login' screen.

 I tried finding another screen with the 'login' view. I found
 another
 one
 in the 'common' component and modified my hello controller to point
 to
 view-map name=login type=screen
 page=component://common/widget/CommonScreens.xml#login/
 but it is no acting the same as previously.

 Please let me know what is missing (or any suggestion how best to
 illustrate login) so I can complete and contribute my tutorial for
 security. Would hate to create a tutorial that worked with one
 specific
 build.

 http://ofbiz.markmail.org/search/?q=Milind+W#query:Milind%20W+page:2+mid:kwgcnrsxjigfilp2+state:results

 Thanks
 -Milind

 hi,
 I got login to work by adding the changes below to my controller
 using
 ofbiz4.0.
 I don't think I follow the reason with OFBTOOLS base persmission
 not
 taking effect in the ofbiz-component as explained in OFBIZ-829.
 But I agree with Si Chen on OFBIZ-829
 The right way is to assume no permission until one of the list of
 permissions is met. Seems more intitutive.
 For now I can workaround it so thanks all.
 -Milind



 preprocessor
 !-- Events to run on every request before security (chains
 exempt) --
 !-- event type=java
 path

Re: how to set security and permissions precedence

2008-08-04 Thread BJ Freeman

.
 I don't think I follow the reason with OFBTOOLS base persmission
 not
 taking effect in the ofbiz-component as explained in OFBIZ-829.
 But I agree with Si Chen on OFBIZ-829
 The right way is to assume no permission until one of the list of
 permissions is met. Seems more intitutive.
 For now I can workaround it so thanks all.
 -Milind



 preprocessor
 !-- Events to run on every request before security (chains
 exempt) --
 !-- event type=java
 path=org.ofbiz.webapp.event.TestEvent
 invoke=test/ --
 event type=java
 path=org.ofbiz.webapp.control.LoginWorker
 invoke=checkExternalLoginKey/
 /preprocessor

 !-- Request Mappings --

   request-map uri=checkLogin edit=false
 descriptionVerify a user is logged in./description
 security https=false auth=false/
 event type=java
 path=org.ofbiz.webapp.control.LoginWorker
 invoke=checkLogin /
 response name=success type=view value=main /
 response name=error type=view value=login /
 /request-map

 request-map uri=login
 security https=false auth=false/
 event type=java
 path=org.ofbiz.webapp.control.LoginWorker
 invoke=login/
 response name=success type=view value=main/
 response name=error type=view value=login/
 /request-map


 request-map uri=main
 security https=false auth=true /
 response name=success type=view value=main/
 /request-map

 view-map name=login type=screen
 page=component://marketing/widget/CommonScreens.xml#login /


 Not with a direct link to the comment where is the explanation ;p
 Actually it was more a didactic post

 Jacques

 From: BJ Freeman [EMAIL PROTECTED]
 LOL
 that was the first link I sent on this thread.

 Jacques Le Roux sent the following on 7/30/2008 2:18 PM:
 OFBiz Wiki is your friend. Just look for OFBTOOLS.

 You would have get
 http://docs.ofbiz.org/display/OFBTECH/OFBiz+security?focusedCommentId=3615#comment-3615


 Jacques

 - Original Message - From: Milind W
 [EMAIL PROTECTED]
 To: user@ofbiz.apache.org
 Sent: Wednesday, July 30, 2008 8:31 PM
 Subject: Re: how to set security and permissions precedence


 Let me try to break up questions.
 Should'nt adding
 base-permission=OFBTOOLS
 to the ofbiz-entity.xml force the user to login with a user id
 that
 is
 associated to the OFBTOOLS security group?
 I can see the application I created and the line seems to have
 no
 effect.
 What is the purpose of the line?
 Thanks
 -Milind

 Please not that opentaps is not at the same level of revision
 that
 ofbiz
 it
 there have been  changes to security.
 there are examples in the
 framework/example
 and
 framework/exampleext
 I believe this to better tutorial
 since they work already.


 Balaji Sundar sent the following on 7/29/2008 9:40 PM:
 BJ Freeman wrote:
 http://docs.ofbiz.org/display/OFBTECH/OFBiz+security

 Milind W sent the following on 7/29/2008 7:58 PM:
 hi,
 Security Permissions
 I am using ofbiz rev.79258
 I want to understand how security works so I made the
 following
 modifications to hello1
 1)I added base-permission=OFBTOOLS to the
 ofbiz-component.xml
 I could still see the application I was assuming the
 application
 would
 as
 me to login or prevent me from seeing the page.
 2)I added security to the main request
 request-map uri=main
 security https=false auth=true/
 response name=success type=view value=main/
 /request-map
 This displays java.lang.NullPointerException in the
 browser.
 How do permissions precedence work starting from the UI to
 the
 entity
 layer.
 Help appreciated.
 Thanks
 -Milind

 Here is the log
 2008-07-29 19:07:17,031 (http-0.0.0.0-8080-1) [
 RequestHandler.java:243:INFO ] [Processing Request]: main
 sessionId=6E6BB45A4B5AB75A10A9B9404FA622A5.jvm1
 2008-07-29 19:07:17,031 (http-0.0.0.0-8080-1) [
 RequestManager.java:159:WARN ]
 [RequestManager.getEventType]
 Type
 of
 event
 for request checkLogin not found
 2008-07-29 19:07:17,031 (http-0.0.0.0-8080-1) [
 RequestManager.java:146:WARN ]
 [RequestManager.getEventPath]
 Path
 of
 event
 for request checkLogin not found
 2008-07-29 19:07:17,031 (http-0.0.0.0-8080-1) [
 RequestManager.java:172:WARN ]
 [RequestManager.getEventMethod]
 Method
 of
 event for request checkLogin not found
 2008-07-29 19:07:17,031 (http-0.0.0.0-8080-1) [
 ControlServlet.java:205:ERROR]
  runtime exception report
 --
 Error in request handler:
 Exception: java.lang.NullPointerException
 Message: null
  stack trace
 ---
 java.lang.NullPointerException
 javolution.util.FastMap.getEntry(Unknown Source)
 javolution.util.FastMap.containsKey(Unknown Source)
 org.ofbiz.webapp.control.RequestManager.getHandlerClass(RequestManager.java:78)

 org.ofbiz.webapp.event.EventFactory.loadEventHandler(EventFactory.java:102)

 org.ofbiz.webapp.event.EventFactory.getEventHandler(EventFactory.java:86)

 org.ofbiz.webapp.control.RequestHandler.runEvent

Re: how to set security and permissions precedence

.

 I tried finding another screen with the 'login' view. I found
 another
 one
 in the 'common' component and modified my hello controller to
 point
 to
 view-map name=login type=screen
 page=component://common/widget/CommonScreens.xml#login/
 but it is no acting the same as previously.

 Please let me know what is missing (or any suggestion how best to
 illustrate login) so I can complete and contribute my tutorial for
 security. Would hate to create a tutorial that worked with one
 specific
 build.

 http://ofbiz.markmail.org/search/?q=Milind+W#query:Milind%20W+page:2+mid:kwgcnrsxjigfilp2+state:results

 Thanks
 -Milind

 hi,
 I got login to work by adding the changes below to my controller
 using
 ofbiz4.0.
 I don't think I follow the reason with OFBTOOLS base persmission
 not
 taking effect in the ofbiz-component as explained in OFBIZ-829.
 But I agree with Si Chen on OFBIZ-829
 The right way is to assume no permission until one of the list
 of
 permissions is met. Seems more intitutive.
 For now I can workaround it so thanks all.
 -Milind



 preprocessor
 !-- Events to run on every request before security
 (chains
 exempt) --
 !-- event type=java
 path=org.ofbiz.webapp.event.TestEvent
 invoke=test/ --
 event type=java
 path=org.ofbiz.webapp.control.LoginWorker
 invoke=checkExternalLoginKey/
 /preprocessor

 !-- Request Mappings --

   request-map uri=checkLogin edit=false
 descriptionVerify a user is logged in./description
 security https=false auth=false/
 event type=java
 path=org.ofbiz.webapp.control.LoginWorker
 invoke=checkLogin /
 response name=success type=view value=main /
 response name=error type=view value=login /
 /request-map

 request-map uri=login
 security https=false auth=false/
 event type=java
 path=org.ofbiz.webapp.control.LoginWorker
 invoke=login/
 response name=success type=view value=main/
 response name=error type=view value=login/
 /request-map


 request-map uri=main
 security https=false auth=true /
 response name=success type=view value=main/
 /request-map

 view-map name=login type=screen
 page=component://marketing/widget/CommonScreens.xml#login /


 Not with a direct link to the comment where is the explanation
 ;p
 Actually it was more a didactic post

 Jacques

 From: BJ Freeman [EMAIL PROTECTED]
 LOL
 that was the first link I sent on this thread.

 Jacques Le Roux sent the following on 7/30/2008 2:18 PM:
 OFBiz Wiki is your friend. Just look for OFBTOOLS.

 You would have get
 http://docs.ofbiz.org/display/OFBTECH/OFBiz+security?focusedCommentId=3615#comment-3615


 Jacques

 - Original Message - From: Milind W
 [EMAIL PROTECTED]
 To: user@ofbiz.apache.org
 Sent: Wednesday, July 30, 2008 8:31 PM
 Subject: Re: how to set security and permissions precedence


 Let me try to break up questions.
 Should'nt adding
 base-permission=OFBTOOLS
 to the ofbiz-entity.xml force the user to login with a user
 id
 that
 is
 associated to the OFBTOOLS security group?
 I can see the application I created and the line seems to
 have
 no
 effect.
 What is the purpose of the line?
 Thanks
 -Milind

 Please not that opentaps is not at the same level of
 revision
 that
 ofbiz
 it
 there have been  changes to security.
 there are examples in the
 framework/example
 and
 framework/exampleext
 I believe this to better tutorial
 since they work already.


 Balaji Sundar sent the following on 7/29/2008 9:40 PM:
 BJ Freeman wrote:
 http://docs.ofbiz.org/display/OFBTECH/OFBiz+security

 Milind W sent the following on 7/29/2008 7:58 PM:
 hi,
 Security Permissions
 I am using ofbiz rev.79258
 I want to understand how security works so I made the
 following
 modifications to hello1
 1)I added base-permission=OFBTOOLS to the
 ofbiz-component.xml
 I could still see the application I was assuming the
 application
 would
 as
 me to login or prevent me from seeing the page.
 2)I added security to the main request
 request-map uri=main
 security https=false auth=true/
 response name=success type=view value=main/
 /request-map
 This displays java.lang.NullPointerException in the
 browser.
 How do permissions precedence work starting from the UI
 to
 the
 entity
 layer.
 Help appreciated.
 Thanks
 -Milind

 Here is the log
 2008-07-29 19:07:17,031 (http-0.0.0.0-8080-1) [
 RequestHandler.java:243:INFO ] [Processing Request]: main
 sessionId=6E6BB45A4B5AB75A10A9B9404FA622A5.jvm1
 2008-07-29 19:07:17,031 (http-0.0.0.0-8080-1) [
 RequestManager.java:159:WARN ]
 [RequestManager.getEventType]
 Type
 of
 event
 for request checkLogin not found
 2008-07-29 19:07:17,031 (http-0.0.0.0-8080-1) [
 RequestManager.java:146:WARN ]
 [RequestManager.getEventPath]
 Path
 of
 event
 for request checkLogin not found
 2008-07-29 19:07:17,031 (http-0.0.0.0-8080-1) [
 RequestManager.java:172:WARN ]
 [RequestManager.getEventMethod]
 Method
 of
 event for request checkLogin not found
 2008-07-29 19:07:17,031 (http

Re: how to set security and permissions precedence

 and modified my hello controller to
 point
 to
 view-map name=login type=screen
 page=component://common/widget/CommonScreens.xml#login/
 but it is no acting the same as previously.

 Please let me know what is missing (or any suggestion how best to
 illustrate login) so I can complete and contribute my tutorial for
 security. Would hate to create a tutorial that worked with one
 specific
 build.

 http://ofbiz.markmail.org/search/?q=Milind+W#query:Milind%20W+page:2+mid:kwgcnrsxjigfilp2+state:results

 Thanks
 -Milind

 hi,
 I got login to work by adding the changes below to my controller
 using
 ofbiz4.0.
 I don't think I follow the reason with OFBTOOLS base persmission
 not
 taking effect in the ofbiz-component as explained in OFBIZ-829.
 But I agree with Si Chen on OFBIZ-829
 The right way is to assume no permission until one of the list
 of
 permissions is met. Seems more intitutive.
 For now I can workaround it so thanks all.
 -Milind



 preprocessor
 !-- Events to run on every request before security
 (chains
 exempt) --
 !-- event type=java
 path=org.ofbiz.webapp.event.TestEvent
 invoke=test/ --
 event type=java
 path=org.ofbiz.webapp.control.LoginWorker
 invoke=checkExternalLoginKey/
 /preprocessor

 !-- Request Mappings --

   request-map uri=checkLogin edit=false
 descriptionVerify a user is logged in./description
 security https=false auth=false/
 event type=java
 path=org.ofbiz.webapp.control.LoginWorker
 invoke=checkLogin /
 response name=success type=view value=main /
 response name=error type=view value=login /
 /request-map

 request-map uri=login
 security https=false auth=false/
 event type=java
 path=org.ofbiz.webapp.control.LoginWorker
 invoke=login/
 response name=success type=view value=main/
 response name=error type=view value=login/
 /request-map


 request-map uri=main
 security https=false auth=true /
 response name=success type=view value=main/
 /request-map

 view-map name=login type=screen
 page=component://marketing/widget/CommonScreens.xml#login /


 Not with a direct link to the comment where is the explanation
 ;p
 Actually it was more a didactic post

 Jacques

 From: BJ Freeman [EMAIL PROTECTED]
 LOL
 that was the first link I sent on this thread.

 Jacques Le Roux sent the following on 7/30/2008 2:18 PM:
 OFBiz Wiki is your friend. Just look for OFBTOOLS.

 You would have get
 http://docs.ofbiz.org/display/OFBTECH/OFBiz+security?focusedCommentId=3615#comment-3615


 Jacques

 - Original Message - From: Milind W
 [EMAIL PROTECTED]
 To: user@ofbiz.apache.org
 Sent: Wednesday, July 30, 2008 8:31 PM
 Subject: Re: how to set security and permissions precedence


 Let me try to break up questions.
 Should'nt adding
 base-permission=OFBTOOLS
 to the ofbiz-entity.xml force the user to login with a user
 id
 that
 is
 associated to the OFBTOOLS security group?
 I can see the application I created and the line seems to
 have
 no
 effect.
 What is the purpose of the line?
 Thanks
 -Milind

 Please not that opentaps is not at the same level of
 revision
 that
 ofbiz
 it
 there have been  changes to security.
 there are examples in the
 framework/example
 and
 framework/exampleext
 I believe this to better tutorial
 since they work already.


 Balaji Sundar sent the following on 7/29/2008 9:40 PM:
 BJ Freeman wrote:
 http://docs.ofbiz.org/display/OFBTECH/OFBiz+security

 Milind W sent the following on 7/29/2008 7:58 PM:
 hi,
 Security Permissions
 I am using ofbiz rev.79258
 I want to understand how security works so I made the
 following
 modifications to hello1
 1)I added base-permission=OFBTOOLS to the
 ofbiz-component.xml
 I could still see the application I was assuming the
 application
 would
 as
 me to login or prevent me from seeing the page.
 2)I added security to the main request
 request-map uri=main
 security https=false auth=true/
 response name=success type=view value=main/
 /request-map
 This displays java.lang.NullPointerException in the
 browser.
 How do permissions precedence work starting from the UI
 to
 the
 entity
 layer.
 Help appreciated.
 Thanks
 -Milind

 Here is the log
 2008-07-29 19:07:17,031 (http-0.0.0.0-8080-1) [
 RequestHandler.java:243:INFO ] [Processing Request]: main
 sessionId=6E6BB45A4B5AB75A10A9B9404FA622A5.jvm1
 2008-07-29 19:07:17,031 (http-0.0.0.0-8080-1) [
 RequestManager.java:159:WARN ]
 [RequestManager.getEventType]
 Type
 of
 event
 for request checkLogin not found
 2008-07-29 19:07:17,031 (http-0.0.0.0-8080-1) [
 RequestManager.java:146:WARN ]
 [RequestManager.getEventPath]
 Path
 of
 event
 for request checkLogin not found
 2008-07-29 19:07:17,031 (http-0.0.0.0-8080-1) [
 RequestManager.java:172:WARN ]
 [RequestManager.getEventMethod]
 Method
 of
 event for request checkLogin not found
 2008-07-29 19:07:17,031 (http-0.0.0.0-8080-1) [
 ControlServlet.java:205:ERROR]
  runtime exception report

Re: how to set security and permissions precedence

2008-08-04 Thread BJ Freeman

 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 UtilJ2eeCompat.java:69 :INFO ] serverInfo: Apache Tomcat/5.5.20
 2008-08-03 18:11:55,343 (http-0.0.0.0-8080-Processor4) [
 UtilJ2eeCompat.java:78 :INFO ] Apache Tomcat detected, using
 response.getWriter to write text out instead of
 response.getOutputStream

 The loginworker seems to be invoked with rev#677863 and not with
 rev#679258.
 Any Idea?

 Did you try an ant clean ? There have been some changes recently
 that
 implie this cleanup.

 Jacques

 From: Milind W [EMAIL PROTECTED]
 Looks like I have a problem making this example work with
 revision#679258

 It worked fine (i.e I was redirected to login screen before I
 could
 get
 to
 main) with rev#677863

 Looks like the view
 view-map name=login type=screen
 page=component://marketing/widget/CommonScreens.xml#login /
 is part of the problem. The CommonScreens.xml has moved and does
 no
 longer
 seem to have the 'login' screen.

 I tried finding another screen with the 'login' view. I found
 another
 one
 in the 'common' component and modified my hello controller to
 point
 to
 view-map name=login type=screen
 page=component://common/widget/CommonScreens.xml#login/
 but it is no acting the same as previously.

 Please let me know what is missing (or any suggestion how best to
 illustrate login) so I can complete and contribute my tutorial for
 security. Would hate to create a tutorial that worked with one
 specific
 build.

 http://ofbiz.markmail.org/search/?q=Milind+W#query:Milind%20W+page:2+mid:kwgcnrsxjigfilp2+state:results

 Thanks
 -Milind

 hi,
 I got login to work by adding the changes below to my controller
 using
 ofbiz4.0.
 I don't think I follow the reason with OFBTOOLS base persmission
 not
 taking effect in the ofbiz-component as explained in OFBIZ-829.
 But I agree with Si Chen on OFBIZ-829
 The right way is to assume no permission until one of the list
 of
 permissions is met. Seems more intitutive.
 For now I can workaround it so thanks all.
 -Milind



 preprocessor
 !-- Events to run on every request before security
 (chains
 exempt) --
 !-- event type=java
 path=org.ofbiz.webapp.event.TestEvent
 invoke=test/ --
 event type=java
 path=org.ofbiz.webapp.control.LoginWorker
 invoke=checkExternalLoginKey/
 /preprocessor

 !-- Request Mappings --

   request-map uri=checkLogin edit=false
 descriptionVerify a user is logged in./description
 security https=false auth=false/
 event type=java
 path=org.ofbiz.webapp.control.LoginWorker
 invoke=checkLogin /
 response name=success type=view value=main /
 response name=error type=view value=login /
 /request-map

 request-map uri=login
 security https=false auth=false/
 event type=java
 path=org.ofbiz.webapp.control.LoginWorker
 invoke=login/
 response name=success type=view value=main/
 response name=error type=view value=login/
 /request-map


 request-map uri=main
 security https=false auth=true /
 response name=success type=view value=main/
 /request-map

 view-map name=login type=screen
 page=component://marketing/widget/CommonScreens.xml#login /


 Not with a direct link to the comment where is the explanation
 ;p
 Actually it was more a didactic post

 Jacques

 From: BJ Freeman [EMAIL PROTECTED]
 LOL
 that was the first link I sent on this thread.

 Jacques Le Roux sent the following on 7/30/2008 2:18 PM:
 OFBiz Wiki is your friend. Just look for OFBTOOLS.

 You would have get
 http://docs.ofbiz.org/display/OFBTECH/OFBiz+security?focusedCommentId=3615#comment-3615


 Jacques

 - Original Message - From: Milind W
 [EMAIL PROTECTED]
 To: user@ofbiz.apache.org
 Sent: Wednesday, July 30, 2008 8:31 PM
 Subject: Re: how to set security and permissions precedence


 Let me try to break up questions.
 Should'nt adding
 base-permission=OFBTOOLS
 to the ofbiz-entity.xml force the user to login with a user
 id
 that
 is
 associated to the OFBTOOLS security group?
 I can see the application I created and the line seems to
 have
 no
 effect.
 What is the purpose of the line?
 Thanks
 -Milind

 Please not that opentaps is not at the same level of
 revision
 that
 ofbiz
 it
 there have been  changes to security.
 there are examples in the
 framework/example
 and
 framework/exampleext
 I believe this to better tutorial
 since they work already.


 Balaji Sundar sent the following on 7/29/2008 9:40 PM:
 BJ Freeman wrote:
 http://docs.ofbiz.org/display/OFBTECH/OFBiz+security

 Milind W sent the following on 7/29/2008 7:58 PM:
 hi,
 Security Permissions
 I am using ofbiz rev.79258
 I want to understand how security works so I made the
 following
 modifications to hello1
 1)I added base-permission=OFBTOOLS to the
 ofbiz-component.xml
 I could still see the application I was assuming the
 application
 would
 as
 me to login or prevent me from seeing the page.
 2)I added security to the main request
 request-map uri=main
 security https

Re: how to set security and permissions precedence

2008-08-04 Thread BJ Freeman

. The CommonScreens.xml has moved and does
 no
 longer
 seem to have the 'login' screen.

 I tried finding another screen with the 'login' view. I found
 another
 one
 in the 'common' component and modified my hello controller to
 point
 to
 view-map name=login type=screen
 page=component://common/widget/CommonScreens.xml#login/
 but it is no acting the same as previously.

 Please let me know what is missing (or any suggestion how best to
 illustrate login) so I can complete and contribute my tutorial for
 security. Would hate to create a tutorial that worked with one
 specific
 build.

 http://ofbiz.markmail.org/search/?q=Milind+W#query:Milind%20W+page:2+mid:kwgcnrsxjigfilp2+state:results

 Thanks
 -Milind

 hi,
 I got login to work by adding the changes below to my controller
 using
 ofbiz4.0.
 I don't think I follow the reason with OFBTOOLS base persmission
 not
 taking effect in the ofbiz-component as explained in OFBIZ-829.
 But I agree with Si Chen on OFBIZ-829
 The right way is to assume no permission until one of the list
 of
 permissions is met. Seems more intitutive.
 For now I can workaround it so thanks all.
 -Milind



 preprocessor
 !-- Events to run on every request before security
 (chains
 exempt) --
 !-- event type=java
 path=org.ofbiz.webapp.event.TestEvent
 invoke=test/ --
 event type=java
 path=org.ofbiz.webapp.control.LoginWorker
 invoke=checkExternalLoginKey/
 /preprocessor

 !-- Request Mappings --

   request-map uri=checkLogin edit=false
 descriptionVerify a user is logged in./description
 security https=false auth=false/
 event type=java
 path=org.ofbiz.webapp.control.LoginWorker
 invoke=checkLogin /
 response name=success type=view value=main /
 response name=error type=view value=login /
 /request-map

 request-map uri=login
 security https=false auth=false/
 event type=java
 path=org.ofbiz.webapp.control.LoginWorker
 invoke=login/
 response name=success type=view value=main/
 response name=error type=view value=login/
 /request-map


 request-map uri=main
 security https=false auth=true /
 response name=success type=view value=main/
 /request-map

 view-map name=login type=screen
 page=component://marketing/widget/CommonScreens.xml#login /


 Not with a direct link to the comment where is the explanation
 ;p
 Actually it was more a didactic post

 Jacques

 From: BJ Freeman [EMAIL PROTECTED]
 LOL
 that was the first link I sent on this thread.

 Jacques Le Roux sent the following on 7/30/2008 2:18 PM:
 OFBiz Wiki is your friend. Just look for OFBTOOLS.

 You would have get
 http://docs.ofbiz.org/display/OFBTECH/OFBiz+security?focusedCommentId=3615#comment-3615


 Jacques

 - Original Message - From: Milind W
 [EMAIL PROTECTED]
 To: user@ofbiz.apache.org
 Sent: Wednesday, July 30, 2008 8:31 PM
 Subject: Re: how to set security and permissions precedence


 Let me try to break up questions.
 Should'nt adding
 base-permission=OFBTOOLS
 to the ofbiz-entity.xml force the user to login with a user
 id
 that
 is
 associated to the OFBTOOLS security group?
 I can see the application I created and the line seems to
 have
 no
 effect.
 What is the purpose of the line?
 Thanks
 -Milind

 Please not that opentaps is not at the same level of
 revision
 that
 ofbiz
 it
 there have been  changes to security.
 there are examples in the
 framework/example
 and
 framework/exampleext
 I believe this to better tutorial
 since they work already.


 Balaji Sundar sent the following on 7/29/2008 9:40 PM:
 BJ Freeman wrote:
 http://docs.ofbiz.org/display/OFBTECH/OFBiz+security

 Milind W sent the following on 7/29/2008 7:58 PM:
 hi,
 Security Permissions
 I am using ofbiz rev.79258
 I want to understand how security works so I made the
 following
 modifications to hello1
 1)I added base-permission=OFBTOOLS to the
 ofbiz-component.xml
 I could still see the application I was assuming the
 application
 would
 as
 me to login or prevent me from seeing the page.
 2)I added security to the main request
 request-map uri=main
 security https=false auth=true/
 response name=success type=view value=main/
 /request-map
 This displays java.lang.NullPointerException in the
 browser.
 How do permissions precedence work starting from the UI
 to
 the
 entity
 layer.
 Help appreciated.
 Thanks
 -Milind

 Here is the log
 2008-07-29 19:07:17,031 (http-0.0.0.0-8080-1) [
 RequestHandler.java:243:INFO ] [Processing Request]: main
 sessionId=6E6BB45A4B5AB75A10A9B9404FA622A5.jvm1
 2008-07-29 19:07:17,031 (http-0.0.0.0-8080-1) [
 RequestManager.java:159:WARN ]
 [RequestManager.getEventType]
 Type
 of
 event
 for request checkLogin not found
 2008-07-29 19:07:17,031 (http-0.0.0.0-8080-1) [
 RequestManager.java:146:WARN ]
 [RequestManager.getEventPath]
 Path
 of
 event
 for request checkLogin not found
 2008-07-29 19:07:17,031 (http-0.0.0.0-8080-1) [
 RequestManager.java:172:WARN

Re: how to set security and permissions precedence