You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ofbiz.apache.org by Deepak Dixit <de...@apache.org> on 2020/08/04 08:59:44 UTC
Re: Move 'SecurityPermission' data to seed data files
IMO SecurityPermission data should be moved to Seed data,
and SecurityGroup and SecurityGroupPermission data is part of demo data
Thanks & Regards
--
Deepak Dixit
ofbiz.apache.org
On Fri, Jul 31, 2020 at 5:43 PM Priya Sharma <pr...@gmail.com>
wrote:
> Hello All,
>
> As per discussion on
> https://issues.apache.org/jira/browse/OFBIZ-10575, we would like to
> confirm whether all security data (i.e SecurityPermission,
> SecurityGroupPermission and hence SecurityGroup) be moved to seed data
> files or only SecurityPermission data.
>
> Is there any particular use-case that may be harmed or any other
> potential security threat that may arise with this change?
>
> Please provide your feedback, concerns, or suggestions.
>
> --
> Best Regards,
> Priya
>
Re: Move 'SecurityPermission' data to seed data files
Posted by Priya Sharma <pr...@gmail.com>.
Thanks, @Jacques Le Roux
I have provided a patch for this improvement.
On Mon, 10 Aug 2020 at 20:00, Jacques Le Roux
<ja...@les7arts.com> wrote:
>
> Hi Priya,
>
> I agree that only SecurityPermission are seed data.
>
> +1 for OFBIZ-10575
>
> Jacques
>
> Le 10/08/2020 à 06:46, Priya Sharma a écrit :
> > Thanks everyone for your responses.
> > @Devanshu, security data for the "SUPER" user is already part of seed
> > data for most components.
> >
> > As per the above discussion, we can conclude to move only the
> > SecurityPermission data to seed data files. (OFBIZ-10575)
> >
> > If anyone still wants to add something, you are always welcome.
> >
> > On Tue, 4 Aug 2020 at 15:02, Devanshu Vyas <vy...@gmail.com> wrote:
> >> I agree with Deepak here that SecurityPermission is seed data and rest is a
> >> part of demo data.
> >>
> >> But, I would like to raise a point here that some SecurityGroup and
> >> SecurityGroupPermission data can also be a part of seed data. Like for
> >> example, SUPER.
> >> Maybe, we can differentiate which SecurityGroup and SecurityGroupPermission
> >> data should be a part of seed data as well.
> >>
> >> Thanks & Regards,
> >> Devanshu Vyas.
> >>
> >>
> >> On Tue, Aug 4, 2020 at 2:31 PM Deepak Dixit <de...@apache.org> wrote:
> >>
> >>> IMO SecurityPermission data should be moved to Seed data,
> >>> and SecurityGroup and SecurityGroupPermission data is part of demo data
> >>>
> >>> Thanks & Regards
> >>> --
> >>> Deepak Dixit
> >>> ofbiz.apache.org
> >>>
> >>>
> >>> On Fri, Jul 31, 2020 at 5:43 PM Priya Sharma <pr...@gmail.com>
> >>> wrote:
> >>>
> >>>> Hello All,
> >>>>
> >>>> As per discussion on
> >>>> https://issues.apache.org/jira/browse/OFBIZ-10575, we would like to
> >>>> confirm whether all security data (i.e SecurityPermission,
> >>>> SecurityGroupPermission and hence SecurityGroup) be moved to seed data
> >>>> files or only SecurityPermission data.
> >>>>
> >>>> Is there any particular use-case that may be harmed or any other
> >>>> potential security threat that may arise with this change?
> >>>>
> >>>> Please provide your feedback, concerns, or suggestions.
> >>>>
> >>>> --
> >>>> Best Regards,
> >>>> Priya
> >>>>
> >
> >
--
Best Regards,
Priya
Re: Move 'SecurityPermission' data to seed data files
Posted by Jacques Le Roux <ja...@les7arts.com>.
Hi Priya,
I agree that only SecurityPermission are seed data.
+1 for OFBIZ-10575
Jacques
Le 10/08/2020 à 06:46, Priya Sharma a écrit :
> Thanks everyone for your responses.
> @Devanshu, security data for the "SUPER" user is already part of seed
> data for most components.
>
> As per the above discussion, we can conclude to move only the
> SecurityPermission data to seed data files. (OFBIZ-10575)
>
> If anyone still wants to add something, you are always welcome.
>
> On Tue, 4 Aug 2020 at 15:02, Devanshu Vyas <vy...@gmail.com> wrote:
>> I agree with Deepak here that SecurityPermission is seed data and rest is a
>> part of demo data.
>>
>> But, I would like to raise a point here that some SecurityGroup and
>> SecurityGroupPermission data can also be a part of seed data. Like for
>> example, SUPER.
>> Maybe, we can differentiate which SecurityGroup and SecurityGroupPermission
>> data should be a part of seed data as well.
>>
>> Thanks & Regards,
>> Devanshu Vyas.
>>
>>
>> On Tue, Aug 4, 2020 at 2:31 PM Deepak Dixit <de...@apache.org> wrote:
>>
>>> IMO SecurityPermission data should be moved to Seed data,
>>> and SecurityGroup and SecurityGroupPermission data is part of demo data
>>>
>>> Thanks & Regards
>>> --
>>> Deepak Dixit
>>> ofbiz.apache.org
>>>
>>>
>>> On Fri, Jul 31, 2020 at 5:43 PM Priya Sharma <pr...@gmail.com>
>>> wrote:
>>>
>>>> Hello All,
>>>>
>>>> As per discussion on
>>>> https://issues.apache.org/jira/browse/OFBIZ-10575, we would like to
>>>> confirm whether all security data (i.e SecurityPermission,
>>>> SecurityGroupPermission and hence SecurityGroup) be moved to seed data
>>>> files or only SecurityPermission data.
>>>>
>>>> Is there any particular use-case that may be harmed or any other
>>>> potential security threat that may arise with this change?
>>>>
>>>> Please provide your feedback, concerns, or suggestions.
>>>>
>>>> --
>>>> Best Regards,
>>>> Priya
>>>>
>
>
Re: Move 'SecurityPermission' data to seed data files
Posted by Priya Sharma <pr...@gmail.com>.
Thanks everyone for your responses.
@Devanshu, security data for the "SUPER" user is already part of seed
data for most components.
As per the above discussion, we can conclude to move only the
SecurityPermission data to seed data files. (OFBIZ-10575)
If anyone still wants to add something, you are always welcome.
On Tue, 4 Aug 2020 at 15:02, Devanshu Vyas <vy...@gmail.com> wrote:
>
> I agree with Deepak here that SecurityPermission is seed data and rest is a
> part of demo data.
>
> But, I would like to raise a point here that some SecurityGroup and
> SecurityGroupPermission data can also be a part of seed data. Like for
> example, SUPER.
> Maybe, we can differentiate which SecurityGroup and SecurityGroupPermission
> data should be a part of seed data as well.
>
> Thanks & Regards,
> Devanshu Vyas.
>
>
> On Tue, Aug 4, 2020 at 2:31 PM Deepak Dixit <de...@apache.org> wrote:
>
> > IMO SecurityPermission data should be moved to Seed data,
> > and SecurityGroup and SecurityGroupPermission data is part of demo data
> >
> > Thanks & Regards
> > --
> > Deepak Dixit
> > ofbiz.apache.org
> >
> >
> > On Fri, Jul 31, 2020 at 5:43 PM Priya Sharma <pr...@gmail.com>
> > wrote:
> >
> > > Hello All,
> > >
> > > As per discussion on
> > > https://issues.apache.org/jira/browse/OFBIZ-10575, we would like to
> > > confirm whether all security data (i.e SecurityPermission,
> > > SecurityGroupPermission and hence SecurityGroup) be moved to seed data
> > > files or only SecurityPermission data.
> > >
> > > Is there any particular use-case that may be harmed or any other
> > > potential security threat that may arise with this change?
> > >
> > > Please provide your feedback, concerns, or suggestions.
> > >
> > > --
> > > Best Regards,
> > > Priya
> > >
> >
--
Best Regards,
Priya
Re: Move 'SecurityPermission' data to seed data files
Posted by Devanshu Vyas <vy...@gmail.com>.
I agree with Deepak here that SecurityPermission is seed data and rest is a
part of demo data.
But, I would like to raise a point here that some SecurityGroup and
SecurityGroupPermission data can also be a part of seed data. Like for
example, SUPER.
Maybe, we can differentiate which SecurityGroup and SecurityGroupPermission
data should be a part of seed data as well.
Thanks & Regards,
Devanshu Vyas.
On Tue, Aug 4, 2020 at 2:31 PM Deepak Dixit <de...@apache.org> wrote:
> IMO SecurityPermission data should be moved to Seed data,
> and SecurityGroup and SecurityGroupPermission data is part of demo data
>
> Thanks & Regards
> --
> Deepak Dixit
> ofbiz.apache.org
>
>
> On Fri, Jul 31, 2020 at 5:43 PM Priya Sharma <pr...@gmail.com>
> wrote:
>
> > Hello All,
> >
> > As per discussion on
> > https://issues.apache.org/jira/browse/OFBIZ-10575, we would like to
> > confirm whether all security data (i.e SecurityPermission,
> > SecurityGroupPermission and hence SecurityGroup) be moved to seed data
> > files or only SecurityPermission data.
> >
> > Is there any particular use-case that may be harmed or any other
> > potential security threat that may arise with this change?
> >
> > Please provide your feedback, concerns, or suggestions.
> >
> > --
> > Best Regards,
> > Priya
> >
>