You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@ofbiz.apache.org by DeedraF <df...@kpi-consulting.net> on 2010/02/05 20:31:06 UTC
Setting product admin permissions on a store or catalog
I am very new to OFBiz. My dev team is working through the technical details
and I am trying to handle the more 'front end' setup activities. Not
finding very many 'exact steps' or documentation to use as a guide, I
thought perhaps someone reading this post could help out??
I have created a store, catalog, products...and would like to now assign
specific permissions accordingly. I do not want all my ADMINs to have the
same full access to a catalog. As a matter of fact, I would like to create
a 'Product Admin' allowing that person/group to simply Add, Edit, and Delete
products in a specific store catalog. Is this a standard feature in OFBiz
that I am just not grasping how to accomplish? If it is, please provide
steps that might help me accomplish this task.
Thanks in advance for your help with this issue.
--
View this message in context: http://n4.nabble.com/Setting-product-admin-permissions-on-a-store-or-catalog-tp1470683p1470683.html
Sent from the OFBiz - User mailing list archive at Nabble.com.
Re: Setting product admin permissions on a store or catalog
Posted by Ruth Hoffman <rh...@aesolves.com>.
Also,
What release and version are we talking about?
TIA
Ruth
Ruth Hoffman wrote:
> Hi Jacques:
> Yes an answer that begets more questions: who is "I" ? Did Patrick
> need to write/modify a service to do this? Is there a UI that
> facilitates this? How are users assigned roles types? Lots of
> unanswered questions.
>
> Ruth
>
> Jacques Le Roux wrote:
>> Hey cool, already an answer, does it help you Ruth?
>>
>> Jacques
>>
>> From: "Patrick" <pa...@gmail.com>
>>> Hi Deedra,
>>> The way I do it is I assign a user as a roleTypeId "VENDOR" to the
>>> appropriate catalog. Then when someone tries to Add, Edit, Delete, I
>>> check to see if they are a vendor, this checking is done in
>>> ProductServices.xml and CategoryServices.xml. If basically a DB
>>> query with <entity-and > and then some checking <if> <condition> ...
>>> Patrick
>>>
>>> On Fri, Feb 5, 2010 at 1:31 PM, DeedraF
>>> <df...@kpi-consulting.net> wrote:
>>>>
>>>> I am very new to OFBiz. My dev team is working through the
>>>> technical details
>>>> and I am trying to handle the more 'front end' setup activities. Not
>>>> finding very many 'exact steps' or documentation to use as a guide, I
>>>> thought perhaps someone reading this post could help out??
>>>>
>>>> I have created a store, catalog, products...and would like to now
>>>> assign
>>>> specific permissions accordingly. I do not want all my ADMINs to
>>>> have the
>>>> same full access to a catalog. As a matter of fact, I would like to
>>>> create
>>>> a 'Product Admin' allowing that person/group to simply Add, Edit,
>>>> and Delete
>>>> products in a specific store catalog. Is this a standard feature in
>>>> OFBiz
>>>> that I am just not grasping how to accomplish? If it is, please
>>>> provide
>>>> steps that might help me accomplish this task.
>>>>
>>>> Thanks in advance for your help with this issue.
>>>>
>>>> --
>>>> View this message in context:
>>>> http://n4.nabble.com/Setting-product-admin-permissions-on-a-store-or-catalog-tp1470683p1470683.html
>>>>
>>>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>>>>
>>>
>>
>>
>
Re: Setting product admin permissions on a store or catalog
Posted by Ruth Hoffman <rh...@aesolves.com>.
Hi Jacques:
Yes an answer that begets more questions: who is "I" ? Did Patrick need
to write/modify a service to do this? Is there a UI that facilitates
this? How are users assigned roles types? Lots of unanswered questions.
Ruth
Jacques Le Roux wrote:
> Hey cool, already an answer, does it help you Ruth?
>
> Jacques
>
> From: "Patrick" <pa...@gmail.com>
>> Hi Deedra,
>> The way I do it is I assign a user as a roleTypeId "VENDOR" to the
>> appropriate catalog. Then when someone tries to Add, Edit, Delete, I
>> check to see if they are a vendor, this checking is done in
>> ProductServices.xml and CategoryServices.xml. If basically a DB
>> query with <entity-and > and then some checking <if> <condition> ...
>> Patrick
>>
>> On Fri, Feb 5, 2010 at 1:31 PM, DeedraF <df...@kpi-consulting.net>
>> wrote:
>>>
>>> I am very new to OFBiz. My dev team is working through the technical
>>> details
>>> and I am trying to handle the more 'front end' setup activities. Not
>>> finding very many 'exact steps' or documentation to use as a guide, I
>>> thought perhaps someone reading this post could help out??
>>>
>>> I have created a store, catalog, products...and would like to now
>>> assign
>>> specific permissions accordingly. I do not want all my ADMINs to
>>> have the
>>> same full access to a catalog. As a matter of fact, I would like to
>>> create
>>> a 'Product Admin' allowing that person/group to simply Add, Edit,
>>> and Delete
>>> products in a specific store catalog. Is this a standard feature in
>>> OFBiz
>>> that I am just not grasping how to accomplish? If it is, please provide
>>> steps that might help me accomplish this task.
>>>
>>> Thanks in advance for your help with this issue.
>>>
>>> --
>>> View this message in context:
>>> http://n4.nabble.com/Setting-product-admin-permissions-on-a-store-or-catalog-tp1470683p1470683.html
>>>
>>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>>>
>>
>
>
Re: Setting product admin permissions on a store or catalog
Posted by Jacques Le Roux <ja...@free.fr>.
Hey cool, already an answer, does it help you Ruth?
Jacques
From: "Patrick" <pa...@gmail.com>
> Hi Deedra,
> The way I do it is I assign a user as a roleTypeId "VENDOR" to the
> appropriate catalog. Then when someone tries to Add, Edit, Delete, I
> check to see if they are a vendor, this checking is done in
> ProductServices.xml and CategoryServices.xml. If basically a DB
> query with <entity-and > and then some checking <if> <condition> ...
> Patrick
>
> On Fri, Feb 5, 2010 at 1:31 PM, DeedraF <df...@kpi-consulting.net> wrote:
>>
>> I am very new to OFBiz. My dev team is working through the technical details
>> and I am trying to handle the more 'front end' setup activities. Not
>> finding very many 'exact steps' or documentation to use as a guide, I
>> thought perhaps someone reading this post could help out??
>>
>> I have created a store, catalog, products...and would like to now assign
>> specific permissions accordingly. I do not want all my ADMINs to have the
>> same full access to a catalog. As a matter of fact, I would like to create
>> a 'Product Admin' allowing that person/group to simply Add, Edit, and Delete
>> products in a specific store catalog. Is this a standard feature in OFBiz
>> that I am just not grasping how to accomplish? If it is, please provide
>> steps that might help me accomplish this task.
>>
>> Thanks in advance for your help with this issue.
>>
>> --
>> View this message in context: http://n4.nabble.com/Setting-product-admin-permissions-on-a-store-or-catalog-tp1470683p1470683.html
>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>>
>
Re: Setting product admin permissions on a store or catalog
Posted by Patrick <pa...@gmail.com>.
Hi Deedra,
The way I do it is I assign a user as a roleTypeId "VENDOR" to the
appropriate catalog. Then when someone tries to Add, Edit, Delete, I
check to see if they are a vendor, this checking is done in
ProductServices.xml and CategoryServices.xml. If basically a DB
query with <entity-and > and then some checking <if> <condition> ...
Patrick
On Fri, Feb 5, 2010 at 1:31 PM, DeedraF <df...@kpi-consulting.net> wrote:
>
> I am very new to OFBiz. My dev team is working through the technical details
> and I am trying to handle the more 'front end' setup activities. Not
> finding very many 'exact steps' or documentation to use as a guide, I
> thought perhaps someone reading this post could help out??
>
> I have created a store, catalog, products...and would like to now assign
> specific permissions accordingly. I do not want all my ADMINs to have the
> same full access to a catalog. As a matter of fact, I would like to create
> a 'Product Admin' allowing that person/group to simply Add, Edit, and Delete
> products in a specific store catalog. Is this a standard feature in OFBiz
> that I am just not grasping how to accomplish? If it is, please provide
> steps that might help me accomplish this task.
>
> Thanks in advance for your help with this issue.
>
> --
> View this message in context: http://n4.nabble.com/Setting-product-admin-permissions-on-a-store-or-catalog-tp1470683p1470683.html
> Sent from the OFBiz - User mailing list archive at Nabble.com.
>
Re: Setting product admin permissions on a store or catalog
Posted by Jacques Le Roux <ja...@free.fr>.
I will wait to see if the 1st to ask this question will get back to us with some results, or questions...
Jacques
From: "Ruth Hoffman" <rh...@aesolves.com>
> Hi Jacques:
> Sure. Can you or some one explain to me how to do this?
> As I said before, I wasn't able to make it work given the tools
> available at the time.
> Regards,
> Ruth
>
> Jacques Le Roux wrote:
>> Ruth,
>>
>> This would be great, I think David is not the only person able to
>> explain that more... We don't need to rely on David for every
>> detail... Let him breathe please :D
>>
>> Jacques
>>
>> From: "Ruth Hoffman" <rh...@aesolves.com>
>>> Hi Jacques:
>>> Thanks for posting this link. I used that when trying to determine
>>> the actual steps involved in getting the requested scenario to
>>> work. At a high level, it is very informative. Beyond that, what is
>>> need is a step by step guide. David, if you would be kind
>>> enough to provide details, I would be more than happy to verify and
>>> document the process and then post it to the Wiki.
>>> Regards,
>>> Ruth
>>>
>>> Jacques Le Roux wrote:
>>>> This page may be helpful to have a beginning of an idea (it gives
>>>> some pointers) on how roles and permissions are used together
>>>> in
>>>> OFBiz to achieve what David is talking about
>>>> http://cwiki.apache.org/confluence/display/OFBTECH/OFBiz+security
>>>>
>>>> HTH
>>>>
>>>> Jacques
>>>>
>>>> From: "David E Jones" <de...@me.com>
>>>>> I think Deedra is talking about product administration and not
>>>>> about access to products in the ecommerce store.
>>>>>
>>>>> There is actually some functionality to give more limited
>>>>> permissions to certain users. Instead of giving a user the full
>>>>> create,
>>>>> update and delete permissions for the catalog manager give them the
>>>>> "role limited" permissions. Then (as a different user that
>>>>> has
>>>>> permission to do so) associate them with a catalog in a certain
>>>>> role (which I've forgotten off the top of my head, sorry) and
>>>>> then
>>>>> they will be able to update products only in that category, and
>>>>> categories under that category (note that any category can be
>>>>> "under" more than one category at a time, so typically these
>>>>> categories will be under one or more categories for permission
>>>>> purposes, and one or more categories for customer browsing
>>>>> purposes, and possibly other categories for other purposes).
>>>>>
>>>>> If you want more something different than this then some code
>>>>> changing will be necessary because of how permissions are
>>>>> currently
>>>>> implemented in OFBiz.
>>>>>
>>>>> -David
>>>>>
>>>>>
>>>>> On Feb 5, 2010, at 6:49 PM, Ruth Hoffman wrote:
>>>>>
>>>>>> Hi DeedraF:
>>>>>> I think this has been answer before on this list not too long ago.
>>>>>>
>>>>>> Out-of-the-box, you can't do this with any existing OFBiz
>>>>>> applications. Basically, the best you can do is limit access to
>>>>>> certain
>>>>>> users (belonging to security groups) by store.
>>>>>>
>>>>>> To regulate access to specific products in a catalog on the same
>>>>>> website (or "store"), you will need to write some code.
>>>>>>
>>>>>> Regards,
>>>>>> Ruth
>>>>>> ----------------------------------------------------
>>>>>> Find me on the web at http://www.myofbiz.com or Google keyword
>>>>>> "myofbiz"
>>>>>> ruth.hoffman@myofbiz.com
>>>>>>
>>>>>> DeedraF wrote:
>>>>>>> I am very new to OFBiz. My dev team is working through the
>>>>>>> technical details
>>>>>>> and I am trying to handle the more 'front end' setup activities.
>>>>>>> Not
>>>>>>> finding very many 'exact steps' or documentation to use as a
>>>>>>> guide, I
>>>>>>> thought perhaps someone reading this post could help out??
>>>>>>>
>>>>>>> I have created a store, catalog, products...and would like to now
>>>>>>> assign
>>>>>>> specific permissions accordingly. I do not want all my ADMINs to
>>>>>>> have the
>>>>>>> same full access to a catalog. As a matter of fact, I would like
>>>>>>> to create
>>>>>>> a 'Product Admin' allowing that person/group to simply Add, Edit,
>>>>>>> and Delete
>>>>>>> products in a specific store catalog. Is this a standard feature
>>>>>>> in OFBiz
>>>>>>> that I am just not grasping how to accomplish? If it is, please
>>>>>>> provide
>>>>>>> steps that might help me accomplish this task.
>>>>>>>
>>>>>>> Thanks in advance for your help with this issue.
>>>>>>>
>>>>>
>>>>
>>>>
>>>
>>
>>
>
Re: Setting product admin permissions on a store or catalog
Posted by Ruth Hoffman <rh...@aesolves.com>.
Hi Jacques:
Sure. Can you or some one explain to me how to do this?
As I said before, I wasn't able to make it work given the tools
available at the time.
Regards,
Ruth
Jacques Le Roux wrote:
> Ruth,
>
> This would be great, I think David is not the only person able to
> explain that more... We don't need to rely on David for every
> detail... Let him breathe please :D
>
> Jacques
>
> From: "Ruth Hoffman" <rh...@aesolves.com>
>> Hi Jacques:
>> Thanks for posting this link. I used that when trying to determine
>> the actual steps involved in getting the requested scenario to
>> work. At a high level, it is very informative. Beyond that, what is
>> need is a step by step guide. David, if you would be kind
>> enough to provide details, I would be more than happy to verify and
>> document the process and then post it to the Wiki.
>> Regards,
>> Ruth
>>
>> Jacques Le Roux wrote:
>>> This page may be helpful to have a beginning of an idea (it gives
>>> some pointers) on how roles and permissions are used together
>>> in
>>> OFBiz to achieve what David is talking about
>>> http://cwiki.apache.org/confluence/display/OFBTECH/OFBiz+security
>>>
>>> HTH
>>>
>>> Jacques
>>>
>>> From: "David E Jones" <de...@me.com>
>>>> I think Deedra is talking about product administration and not
>>>> about access to products in the ecommerce store.
>>>>
>>>> There is actually some functionality to give more limited
>>>> permissions to certain users. Instead of giving a user the full
>>>> create,
>>>> update and delete permissions for the catalog manager give them the
>>>> "role limited" permissions. Then (as a different user that
>>>> has
>>>> permission to do so) associate them with a catalog in a certain
>>>> role (which I've forgotten off the top of my head, sorry) and
>>>> then
>>>> they will be able to update products only in that category, and
>>>> categories under that category (note that any category can be
>>>> "under" more than one category at a time, so typically these
>>>> categories will be under one or more categories for permission
>>>> purposes, and one or more categories for customer browsing
>>>> purposes, and possibly other categories for other purposes).
>>>>
>>>> If you want more something different than this then some code
>>>> changing will be necessary because of how permissions are
>>>> currently
>>>> implemented in OFBiz.
>>>>
>>>> -David
>>>>
>>>>
>>>> On Feb 5, 2010, at 6:49 PM, Ruth Hoffman wrote:
>>>>
>>>>> Hi DeedraF:
>>>>> I think this has been answer before on this list not too long ago.
>>>>>
>>>>> Out-of-the-box, you can't do this with any existing OFBiz
>>>>> applications. Basically, the best you can do is limit access to
>>>>> certain
>>>>> users (belonging to security groups) by store.
>>>>>
>>>>> To regulate access to specific products in a catalog on the same
>>>>> website (or "store"), you will need to write some code.
>>>>>
>>>>> Regards,
>>>>> Ruth
>>>>> ----------------------------------------------------
>>>>> Find me on the web at http://www.myofbiz.com or Google keyword
>>>>> "myofbiz"
>>>>> ruth.hoffman@myofbiz.com
>>>>>
>>>>> DeedraF wrote:
>>>>>> I am very new to OFBiz. My dev team is working through the
>>>>>> technical details
>>>>>> and I am trying to handle the more 'front end' setup activities.
>>>>>> Not
>>>>>> finding very many 'exact steps' or documentation to use as a
>>>>>> guide, I
>>>>>> thought perhaps someone reading this post could help out??
>>>>>>
>>>>>> I have created a store, catalog, products...and would like to now
>>>>>> assign
>>>>>> specific permissions accordingly. I do not want all my ADMINs to
>>>>>> have the
>>>>>> same full access to a catalog. As a matter of fact, I would like
>>>>>> to create
>>>>>> a 'Product Admin' allowing that person/group to simply Add, Edit,
>>>>>> and Delete
>>>>>> products in a specific store catalog. Is this a standard feature
>>>>>> in OFBiz
>>>>>> that I am just not grasping how to accomplish? If it is, please
>>>>>> provide
>>>>>> steps that might help me accomplish this task.
>>>>>>
>>>>>> Thanks in advance for your help with this issue.
>>>>>>
>>>>
>>>
>>>
>>
>
>
Re: Setting product admin permissions on a store or catalog
Posted by Jacques Le Roux <ja...@free.fr>.
Ruth,
This would be great, I think David is not the only person able to explain that more... We don't need to rely on David for every
detail... Let him breathe please :D
Jacques
From: "Ruth Hoffman" <rh...@aesolves.com>
> Hi Jacques:
> Thanks for posting this link. I used that when trying to determine the actual steps involved in getting the requested scenario to
> work. At a high level, it is very informative. Beyond that, what is need is a step by step guide. David, if you would be kind
> enough to provide details, I would be more than happy to verify and document the process and then post it to the Wiki.
> Regards,
> Ruth
>
> Jacques Le Roux wrote:
>> This page may be helpful to have a beginning of an idea (it gives some pointers) on how roles and permissions are used together
>> in
>> OFBiz to achieve what David is talking about
>> http://cwiki.apache.org/confluence/display/OFBTECH/OFBiz+security
>>
>> HTH
>>
>> Jacques
>>
>> From: "David E Jones" <de...@me.com>
>>> I think Deedra is talking about product administration and not about access to products in the ecommerce store.
>>>
>>> There is actually some functionality to give more limited permissions to certain users. Instead of giving a user the full
>>> create,
>>> update and delete permissions for the catalog manager give them the "role limited" permissions. Then (as a different user that
>>> has
>>> permission to do so) associate them with a catalog in a certain role (which I've forgotten off the top of my head, sorry) and
>>> then
>>> they will be able to update products only in that category, and categories under that category (note that any category can be
>>> "under" more than one category at a time, so typically these categories will be under one or more categories for permission
>>> purposes, and one or more categories for customer browsing purposes, and possibly other categories for other purposes).
>>>
>>> If you want more something different than this then some code changing will be necessary because of how permissions are
>>> currently
>>> implemented in OFBiz.
>>>
>>> -David
>>>
>>>
>>> On Feb 5, 2010, at 6:49 PM, Ruth Hoffman wrote:
>>>
>>>> Hi DeedraF:
>>>> I think this has been answer before on this list not too long ago.
>>>>
>>>> Out-of-the-box, you can't do this with any existing OFBiz applications. Basically, the best you can do is limit access to
>>>> certain
>>>> users (belonging to security groups) by store.
>>>>
>>>> To regulate access to specific products in a catalog on the same website (or "store"), you will need to write some code.
>>>>
>>>> Regards,
>>>> Ruth
>>>> ----------------------------------------------------
>>>> Find me on the web at http://www.myofbiz.com or Google keyword "myofbiz"
>>>> ruth.hoffman@myofbiz.com
>>>>
>>>> DeedraF wrote:
>>>>> I am very new to OFBiz. My dev team is working through the technical details
>>>>> and I am trying to handle the more 'front end' setup activities. Not
>>>>> finding very many 'exact steps' or documentation to use as a guide, I
>>>>> thought perhaps someone reading this post could help out??
>>>>>
>>>>> I have created a store, catalog, products...and would like to now assign
>>>>> specific permissions accordingly. I do not want all my ADMINs to have the
>>>>> same full access to a catalog. As a matter of fact, I would like to create
>>>>> a 'Product Admin' allowing that person/group to simply Add, Edit, and Delete
>>>>> products in a specific store catalog. Is this a standard feature in OFBiz
>>>>> that I am just not grasping how to accomplish? If it is, please provide
>>>>> steps that might help me accomplish this task.
>>>>>
>>>>> Thanks in advance for your help with this issue.
>>>>>
>>>
>>
>>
>
Re: Setting product admin permissions on a store or catalog
Posted by Ruth Hoffman <rh...@aesolves.com>.
Hi Jacques:
Thanks for posting this link. I used that when trying to determine the
actual steps involved in getting the requested scenario to work. At a
high level, it is very informative. Beyond that, what is need is a step
by step guide. David, if you would be kind enough to provide details, I
would be more than happy to verify and document the process and then
post it to the Wiki.
Regards,
Ruth
Jacques Le Roux wrote:
> This page may be helpful to have a beginning of an idea (it gives some
> pointers) on how roles and permissions are used together in
> OFBiz to achieve what David is talking about
> http://cwiki.apache.org/confluence/display/OFBTECH/OFBiz+security
>
> HTH
>
> Jacques
>
> From: "David E Jones" <de...@me.com>
>> I think Deedra is talking about product administration and not about
>> access to products in the ecommerce store.
>>
>> There is actually some functionality to give more limited permissions
>> to certain users. Instead of giving a user the full create,
>> update and delete permissions for the catalog manager give them the
>> "role limited" permissions. Then (as a different user that has
>> permission to do so) associate them with a catalog in a certain role
>> (which I've forgotten off the top of my head, sorry) and then
>> they will be able to update products only in that category, and
>> categories under that category (note that any category can be
>> "under" more than one category at a time, so typically these
>> categories will be under one or more categories for permission
>> purposes, and one or more categories for customer browsing purposes,
>> and possibly other categories for other purposes).
>>
>> If you want more something different than this then some code
>> changing will be necessary because of how permissions are currently
>> implemented in OFBiz.
>>
>> -David
>>
>>
>> On Feb 5, 2010, at 6:49 PM, Ruth Hoffman wrote:
>>
>>> Hi DeedraF:
>>> I think this has been answer before on this list not too long ago.
>>>
>>> Out-of-the-box, you can't do this with any existing OFBiz
>>> applications. Basically, the best you can do is limit access to certain
>>> users (belonging to security groups) by store.
>>>
>>> To regulate access to specific products in a catalog on the same
>>> website (or "store"), you will need to write some code.
>>>
>>> Regards,
>>> Ruth
>>> ----------------------------------------------------
>>> Find me on the web at http://www.myofbiz.com or Google keyword
>>> "myofbiz"
>>> ruth.hoffman@myofbiz.com
>>>
>>> DeedraF wrote:
>>>> I am very new to OFBiz. My dev team is working through the
>>>> technical details
>>>> and I am trying to handle the more 'front end' setup activities. Not
>>>> finding very many 'exact steps' or documentation to use as a guide, I
>>>> thought perhaps someone reading this post could help out??
>>>>
>>>> I have created a store, catalog, products...and would like to now
>>>> assign
>>>> specific permissions accordingly. I do not want all my ADMINs to
>>>> have the
>>>> same full access to a catalog. As a matter of fact, I would like
>>>> to create
>>>> a 'Product Admin' allowing that person/group to simply Add, Edit,
>>>> and Delete
>>>> products in a specific store catalog. Is this a standard feature
>>>> in OFBiz
>>>> that I am just not grasping how to accomplish? If it is, please
>>>> provide
>>>> steps that might help me accomplish this task.
>>>>
>>>> Thanks in advance for your help with this issue.
>>>>
>>
>
>
Re: Setting product admin permissions on a store or catalog
Posted by Jacques Le Roux <ja...@free.fr>.
This page may be helpful to have a beginning of an idea (it gives some pointers) on how roles and permissions are used together in
OFBiz to achieve what David is talking about
http://cwiki.apache.org/confluence/display/OFBTECH/OFBiz+security
HTH
Jacques
From: "David E Jones" <de...@me.com>
> I think Deedra is talking about product administration and not about access to products in the ecommerce store.
>
> There is actually some functionality to give more limited permissions to certain users. Instead of giving a user the full create,
> update and delete permissions for the catalog manager give them the "role limited" permissions. Then (as a different user that has
> permission to do so) associate them with a catalog in a certain role (which I've forgotten off the top of my head, sorry) and then
> they will be able to update products only in that category, and categories under that category (note that any category can be
> "under" more than one category at a time, so typically these categories will be under one or more categories for permission
> purposes, and one or more categories for customer browsing purposes, and possibly other categories for other purposes).
>
> If you want more something different than this then some code changing will be necessary because of how permissions are currently
> implemented in OFBiz.
>
> -David
>
>
> On Feb 5, 2010, at 6:49 PM, Ruth Hoffman wrote:
>
>> Hi DeedraF:
>> I think this has been answer before on this list not too long ago.
>>
>> Out-of-the-box, you can't do this with any existing OFBiz applications. Basically, the best you can do is limit access to certain
>> users (belonging to security groups) by store.
>>
>> To regulate access to specific products in a catalog on the same website (or "store"), you will need to write some code.
>>
>> Regards,
>> Ruth
>> ----------------------------------------------------
>> Find me on the web at http://www.myofbiz.com or Google keyword "myofbiz"
>> ruth.hoffman@myofbiz.com
>>
>> DeedraF wrote:
>>> I am very new to OFBiz. My dev team is working through the technical details
>>> and I am trying to handle the more 'front end' setup activities. Not
>>> finding very many 'exact steps' or documentation to use as a guide, I
>>> thought perhaps someone reading this post could help out??
>>>
>>> I have created a store, catalog, products...and would like to now assign
>>> specific permissions accordingly. I do not want all my ADMINs to have the
>>> same full access to a catalog. As a matter of fact, I would like to create
>>> a 'Product Admin' allowing that person/group to simply Add, Edit, and Delete
>>> products in a specific store catalog. Is this a standard feature in OFBiz
>>> that I am just not grasping how to accomplish? If it is, please provide
>>> steps that might help me accomplish this task.
>>>
>>> Thanks in advance for your help with this issue.
>>>
>
Re: Setting product admin permissions on a store or catalog
Posted by Jacques Le Roux <ja...@free.fr>.
http://cwiki.apache.org/confluence/display/OFBTECH/OFBiz+security
Jacques
From: "Ruth Hoffman" <rh...@aesolves.com>
> Hi David:
> I tried your solution. It causes errors in the trunk and in version 9.04. Since it is not documented anywhere how to do this, its
> pretty hard to report it as an error or a bug.
>
> Regards,
> Ruth
>
> David E Jones wrote:
>> I think Deedra is talking about product administration and not about access to products in the ecommerce store.
>>
>> There is actually some functionality to give more limited permissions to certain users. Instead of giving a user the full create,
>> update and delete permissions for the catalog manager give them the "role limited" permissions. Then (as a different user that
>> has permission to do so) associate them with a catalog in a certain role (which I've forgotten off the top of my head, sorry) and
>> then they will be able to update products only in that category, and categories under that category (note that any category can
>> be "under" more than one category at a time, so typically these categories will be under one or more categories for permission
>> purposes, and one or more categories for customer browsing purposes, and possibly other categories for other purposes).
>>
>> If you want more something different than this then some code changing will be necessary because of how permissions are currently
>> implemented in OFBiz.
>>
>> -David
>>
>>
>> On Feb 5, 2010, at 6:49 PM, Ruth Hoffman wrote:
>>
>>
>>> Hi DeedraF:
>>> I think this has been answer before on this list not too long ago.
>>>
>>> Out-of-the-box, you can't do this with any existing OFBiz applications. Basically, the best you can do is limit access to
>>> certain users (belonging to security groups) by store.
>>>
>>> To regulate access to specific products in a catalog on the same website (or "store"), you will need to write some code.
>>>
>>> Regards,
>>> Ruth
>>> ----------------------------------------------------
>>> Find me on the web at http://www.myofbiz.com or Google keyword "myofbiz"
>>> ruth.hoffman@myofbiz.com
>>>
>>> DeedraF wrote:
>>>
>>>> I am very new to OFBiz. My dev team is working through the technical details
>>>> and I am trying to handle the more 'front end' setup activities. Not
>>>> finding very many 'exact steps' or documentation to use as a guide, I
>>>> thought perhaps someone reading this post could help out??
>>>>
>>>> I have created a store, catalog, products...and would like to now assign
>>>> specific permissions accordingly. I do not want all my ADMINs to have the
>>>> same full access to a catalog. As a matter of fact, I would like to create
>>>> a 'Product Admin' allowing that person/group to simply Add, Edit, and Delete
>>>> products in a specific store catalog. Is this a standard feature in OFBiz
>>>> that I am just not grasping how to accomplish? If it is, please provide
>>>> steps that might help me accomplish this task.
>>>>
>>>> Thanks in advance for your help with this issue.
>>>>
>>
>>
>>
>
Re: Setting product admin permissions on a store or catalog
Posted by Ruth Hoffman <rh...@aesolves.com>.
Sorry David:
I believe you are correct in that I misunderstood the question. What I
should have said to you is: I have tried adding roles and roletypes to
products, categories and catalogs in both the trunk and version 9.04 and
it does not work or is broken. I don't know which since I'm not 100%
certain how to set this up. I tried several scenarios none of which
work. The best I was able to achieve was controlled access to the
Catalog Manager based on security groups.
Regards,
Ruth
Ruth Hoffman wrote:
> Hi David:
> I tried your solution. It causes errors in the trunk and in version
> 9.04. Since it is not documented anywhere how to do this, its pretty
> hard to report it as an error or a bug.
>
> Regards,
> Ruth
>
> David E Jones wrote:
>> I think Deedra is talking about product administration and not about
>> access to products in the ecommerce store.
>>
>> There is actually some functionality to give more limited permissions
>> to certain users. Instead of giving a user the full create, update
>> and delete permissions for the catalog manager give them the "role
>> limited" permissions. Then (as a different user that has permission
>> to do so) associate them with a catalog in a certain role (which I've
>> forgotten off the top of my head, sorry) and then they will be able
>> to update products only in that category, and categories under that
>> category (note that any category can be "under" more than one
>> category at a time, so typically these categories will be under one
>> or more categories for permission purposes, and one or more
>> categories for customer browsing purposes, and possibly other
>> categories for other purposes).
>>
>> If you want more something different than this then some code
>> changing will be necessary because of how permissions are currently
>> implemented in OFBiz.
>>
>> -David
>>
>>
>> On Feb 5, 2010, at 6:49 PM, Ruth Hoffman wrote:
>>
>>
>>> Hi DeedraF:
>>> I think this has been answer before on this list not too long ago.
>>>
>>> Out-of-the-box, you can't do this with any existing OFBiz
>>> applications. Basically, the best you can do is limit access to
>>> certain users (belonging to security groups) by store.
>>>
>>> To regulate access to specific products in a catalog on the same
>>> website (or "store"), you will need to write some code.
>>>
>>> Regards,
>>> Ruth
>>> ----------------------------------------------------
>>> Find me on the web at http://www.myofbiz.com or Google keyword
>>> "myofbiz"
>>> ruth.hoffman@myofbiz.com
>>>
>>> DeedraF wrote:
>>>
>>>> I am very new to OFBiz. My dev team is working through the
>>>> technical details
>>>> and I am trying to handle the more 'front end' setup activities. Not
>>>> finding very many 'exact steps' or documentation to use as a guide, I
>>>> thought perhaps someone reading this post could help out??
>>>>
>>>> I have created a store, catalog, products...and would like to now
>>>> assign
>>>> specific permissions accordingly. I do not want all my ADMINs to
>>>> have the
>>>> same full access to a catalog. As a matter of fact, I would like
>>>> to create
>>>> a 'Product Admin' allowing that person/group to simply Add, Edit,
>>>> and Delete
>>>> products in a specific store catalog. Is this a standard feature
>>>> in OFBiz
>>>> that I am just not grasping how to accomplish? If it is, please
>>>> provide
>>>> steps that might help me accomplish this task.
>>>>
>>>> Thanks in advance for your help with this issue.
>>>>
>>
>>
>>
>
Re: Setting product admin permissions on a store or catalog
Posted by Ruth Hoffman <rh...@aesolves.com>.
Hi David:
I tried your solution. It causes errors in the trunk and in version
9.04. Since it is not documented anywhere how to do this, its pretty
hard to report it as an error or a bug.
Regards,
Ruth
David E Jones wrote:
> I think Deedra is talking about product administration and not about access to products in the ecommerce store.
>
> There is actually some functionality to give more limited permissions to certain users. Instead of giving a user the full create, update and delete permissions for the catalog manager give them the "role limited" permissions. Then (as a different user that has permission to do so) associate them with a catalog in a certain role (which I've forgotten off the top of my head, sorry) and then they will be able to update products only in that category, and categories under that category (note that any category can be "under" more than one category at a time, so typically these categories will be under one or more categories for permission purposes, and one or more categories for customer browsing purposes, and possibly other categories for other purposes).
>
> If you want more something different than this then some code changing will be necessary because of how permissions are currently implemented in OFBiz.
>
> -David
>
>
> On Feb 5, 2010, at 6:49 PM, Ruth Hoffman wrote:
>
>
>> Hi DeedraF:
>> I think this has been answer before on this list not too long ago.
>>
>> Out-of-the-box, you can't do this with any existing OFBiz applications. Basically, the best you can do is limit access to certain users (belonging to security groups) by store.
>>
>> To regulate access to specific products in a catalog on the same website (or "store"), you will need to write some code.
>>
>> Regards,
>> Ruth
>> ----------------------------------------------------
>> Find me on the web at http://www.myofbiz.com or Google keyword "myofbiz"
>> ruth.hoffman@myofbiz.com
>>
>> DeedraF wrote:
>>
>>> I am very new to OFBiz. My dev team is working through the technical details
>>> and I am trying to handle the more 'front end' setup activities. Not
>>> finding very many 'exact steps' or documentation to use as a guide, I
>>> thought perhaps someone reading this post could help out??
>>>
>>> I have created a store, catalog, products...and would like to now assign
>>> specific permissions accordingly. I do not want all my ADMINs to have the
>>> same full access to a catalog. As a matter of fact, I would like to create
>>> a 'Product Admin' allowing that person/group to simply Add, Edit, and Delete
>>> products in a specific store catalog. Is this a standard feature in OFBiz
>>> that I am just not grasping how to accomplish? If it is, please provide
>>> steps that might help me accomplish this task.
>>>
>>> Thanks in advance for your help with this issue.
>>>
>>>
>
>
>
Re: Setting product admin permissions on a store or catalog
Posted by Ruth Hoffman <rh...@aesolves.com>.
Hi Deedra:
Just a quick note about Security Groups:
OOTB they work to control access to website locations as defined by
URLs. So, when a login attempt occurs or when a user attempts to access
a URL for a given webapp, OFBiz will check to see if the user has the
proper Security Group associations. If they do, they are allowed access
to that URL or web page.
Bottom-line: I don't think Security Groups is the answer to your
problem. IMO you will need to revisit the role associations as mentioned
in an earlier post.
Hope that helps (vs. making you more confused :-)
Regards,
Ruth
----------------------------------------------------
Find me on the web at http://www.myofbiz.com or Google keyword "myofbiz"
ruth.hoffman@myofbiz.com
DeedraF wrote:
> Thanks David (and everyone else looking into this issue). I am in fact
> attempting to limit at the administration side of things, not the eCommerce
> level. Just to be clear, I have created a store XYZ with a catalog 123 and
> two categories shippable, non-shippable. I have created a couple products
> under each categories within the catalog 123. Now I would like is to setup
> a few ADMIN accounts with different access. For example, 'Admin-all' should
> have all rights and all tabs accessible for store, catalog, categories,
> products.... while 'Admin-product' should have rights to perhaps add,
> delete, update products within existing categories of a catalog 123 in store
> XYZ. We are trying to start small with our eCommerce as I am afraid many of
> the admin users will be overwhelmed by the vast possibilities within this
> tool. Thus, I am hoping to limit their confusion a bit if at all possible
> :)
>
> If I can accomplish this out of the box by creating a security group, I will
> be happy to do so. Could someone simply provide steps for me to follow?
>
> Thanks again for all your help!
> Kind Regards,
> Deedra
>
Re: Setting product admin permissions on a store or catalog
Posted by DeedraF <df...@kpi-consulting.net>.
Thanks David (and everyone else looking into this issue). I am in fact
attempting to limit at the administration side of things, not the eCommerce
level. Just to be clear, I have created a store XYZ with a catalog 123 and
two categories shippable, non-shippable. I have created a couple products
under each categories within the catalog 123. Now I would like is to setup
a few ADMIN accounts with different access. For example, 'Admin-all' should
have all rights and all tabs accessible for store, catalog, categories,
products.... while 'Admin-product' should have rights to perhaps add,
delete, update products within existing categories of a catalog 123 in store
XYZ. We are trying to start small with our eCommerce as I am afraid many of
the admin users will be overwhelmed by the vast possibilities within this
tool. Thus, I am hoping to limit their confusion a bit if at all possible
:)
If I can accomplish this out of the box by creating a security group, I will
be happy to do so. Could someone simply provide steps for me to follow?
Thanks again for all your help!
Kind Regards,
Deedra
--
View this message in context: http://n4.nabble.com/Setting-product-admin-permissions-on-a-store-or-catalog-tp1470683p1473085.html
Sent from the OFBiz - User mailing list archive at Nabble.com.
Re: Setting product admin permissions on a store or catalog
Posted by David E Jones <de...@me.com>.
I think Deedra is talking about product administration and not about access to products in the ecommerce store.
There is actually some functionality to give more limited permissions to certain users. Instead of giving a user the full create, update and delete permissions for the catalog manager give them the "role limited" permissions. Then (as a different user that has permission to do so) associate them with a catalog in a certain role (which I've forgotten off the top of my head, sorry) and then they will be able to update products only in that category, and categories under that category (note that any category can be "under" more than one category at a time, so typically these categories will be under one or more categories for permission purposes, and one or more categories for customer browsing purposes, and possibly other categories for other purposes).
If you want more something different than this then some code changing will be necessary because of how permissions are currently implemented in OFBiz.
-David
On Feb 5, 2010, at 6:49 PM, Ruth Hoffman wrote:
> Hi DeedraF:
> I think this has been answer before on this list not too long ago.
>
> Out-of-the-box, you can't do this with any existing OFBiz applications. Basically, the best you can do is limit access to certain users (belonging to security groups) by store.
>
> To regulate access to specific products in a catalog on the same website (or "store"), you will need to write some code.
>
> Regards,
> Ruth
> ----------------------------------------------------
> Find me on the web at http://www.myofbiz.com or Google keyword "myofbiz"
> ruth.hoffman@myofbiz.com
>
> DeedraF wrote:
>> I am very new to OFBiz. My dev team is working through the technical details
>> and I am trying to handle the more 'front end' setup activities. Not
>> finding very many 'exact steps' or documentation to use as a guide, I
>> thought perhaps someone reading this post could help out??
>>
>> I have created a store, catalog, products...and would like to now assign
>> specific permissions accordingly. I do not want all my ADMINs to have the
>> same full access to a catalog. As a matter of fact, I would like to create
>> a 'Product Admin' allowing that person/group to simply Add, Edit, and Delete
>> products in a specific store catalog. Is this a standard feature in OFBiz
>> that I am just not grasping how to accomplish? If it is, please provide
>> steps that might help me accomplish this task.
>>
>> Thanks in advance for your help with this issue.
>>
Re: Setting product admin permissions on a store or catalog
Posted by Ruth Hoffman <rh...@aesolves.com>.
Hi DeedraF:
I think this has been answer before on this list not too long ago.
Out-of-the-box, you can't do this with any existing OFBiz applications.
Basically, the best you can do is limit access to certain users
(belonging to security groups) by store.
To regulate access to specific products in a catalog on the same website
(or "store"), you will need to write some code.
Regards,
Ruth
----------------------------------------------------
Find me on the web at http://www.myofbiz.com or Google keyword "myofbiz"
ruth.hoffman@myofbiz.com
DeedraF wrote:
> I am very new to OFBiz. My dev team is working through the technical details
> and I am trying to handle the more 'front end' setup activities. Not
> finding very many 'exact steps' or documentation to use as a guide, I
> thought perhaps someone reading this post could help out??
>
> I have created a store, catalog, products...and would like to now assign
> specific permissions accordingly. I do not want all my ADMINs to have the
> same full access to a catalog. As a matter of fact, I would like to create
> a 'Product Admin' allowing that person/group to simply Add, Edit, and Delete
> products in a specific store catalog. Is this a standard feature in OFBiz
> that I am just not grasping how to accomplish? If it is, please provide
> steps that might help me accomplish this task.
>
> Thanks in advance for your help with this issue.
>
>