Catalog permissions troubles

[Bruno Busco]

Hi,
I am in the process of defining security groups of my system users.

Trying to redefine a catalog limited administrator security group I have
noted that if I remove the CATALOG_VIEW permission from the CATALOGADMIN_LTD
security group a user of this group cannot login to the catalog application
(and this is fine).

But if I add the CATALOG_VIEW permission back into the CATALOGADMIN_LTD
security group the user still is unable to login.
One more test I have done is to create a new security group and to add to it
the same permissions of the CATALOGADMIN_LTD group.
A user with the new group cannot login to the catalog application.

Am I missing some step in the process or this is a bug?

Many thanks,
Bruno

[Scott Gray]

Hi Bruno

Your users need to have the base permission OFBTOOLS in order to be able to
login to any of the standard OFBiz apps.  The required base permissions can
be found in each app's ofbiz-component.xml.

As always your best reference for setting up data is the demo data.  If
something isn't working with your data you should always compare it to the
demo data first.

Regards
Scott

2008/5/24 Bruno Busco <[hidden email]>:

> Hi,
> I am in the process of defining security groups of my system users.
>
> Trying to redefine a catalog limited administrator security group I have
> noted that if I remove the CATALOG_VIEW permission from the
> CATALOGADMIN_LTD
> security group a user of this group cannot login to the catalog application
> (and this is fine).
>
> But if I add the CATALOG_VIEW permission back into the CATALOGADMIN_LTD
> security group the user still is unable to login.
> One more test I have done is to create a new security group and to add to
> it
> the same permissions of the CATALOGADMIN_LTD group.
> A user with the new group cannot login to the catalog application.
>
> Am I missing some step in the process or this is a bug?
>
> Many thanks,
> Bruno
>

[Bruno Busco]

Scott,
I have tryed the following procedure right now on the demo server:
1) login as admin/ofbiz
2) created a new Customer test/ofbiz
3) added the CATALOGADMIN_LTD security group to the test user
4) login as test/ofbiz to the catalog application --> OK
5) login again as admin/ofbiz
6) removed the CATALOG_VIEW permission from the CATALOGADMIN_LTD security
group
7) login as test/ofbiz to the catalog application --> FAILED (AS EXPECTED)
8) login as admin/ofbiz
9) added the CATALOG_VIEW permission to the CATALOGADMIN_LTD security group
10) login as test/ofbiz to the catalog application --> !!!!! FAILED !!!!!!!

If you go on the demo server right now you should still see the problem.

-Bruno


2008/5/24 Scott Gray <[hidden email]>:

> Hi Bruno
>
> Your users need to have the base permission OFBTOOLS in order to be able to
> login to any of the standard OFBiz apps.  The required base permissions can
> be found in each app's ofbiz-component.xml.
>
> As always your best reference for setting up data is the demo data.  If
> something isn't working with your data you should always compare it to the
> demo data first.
>
> Regards
> Scott
>
> 2008/5/24 Bruno Busco <[hidden email]>:
>
> > Hi,
> > I am in the process of defining security groups of my system users.
> >
> > Trying to redefine a catalog limited administrator security group I have
> > noted that if I remove the CATALOG_VIEW permission from the
> > CATALOGADMIN_LTD
> > security group a user of this group cannot login to the catalog
> application
> > (and this is fine).
> >
> > But if I add the CATALOG_VIEW permission back into the CATALOGADMIN_LTD
> > security group the user still is unable to login.
> > One more test I have done is to create a new security group and to add to
> > it
> > the same permissions of the CATALOGADMIN_LTD group.
> > A user with the new group cannot login to the catalog application.
> >
> > Am I missing some step in the process or this is a bug?
> >
> > Many thanks,
> > Bruno
> >
>

[Scott Gray]

You'll probably find that is caused by some sort of caching issue, try
clearing the cache in webtools.

Scott

2008/5/24 Bruno Busco <[hidden email]>:

> Scott,
> I have tryed the following procedure right now on the demo server:
> 1) login as admin/ofbiz
> 2) created a new Customer test/ofbiz
> 3) added the CATALOGADMIN_LTD security group to the test user
> 4) login as test/ofbiz to the catalog application --> OK
> 5) login again as admin/ofbiz
> 6) removed the CATALOG_VIEW permission from the CATALOGADMIN_LTD security
> group
> 7) login as test/ofbiz to the catalog application --> FAILED (AS EXPECTED)
> 8) login as admin/ofbiz
> 9) added the CATALOG_VIEW permission to the CATALOGADMIN_LTD security group
> 10) login as test/ofbiz to the catalog application --> !!!!! FAILED !!!!!!!
>
> If you go on the demo server right now you should still see the problem.
>
> -Bruno
>
>
> 2008/5/24 Scott Gray <[hidden email]>:
>
> > Hi Bruno
> >
> > Your users need to have the base permission OFBTOOLS in order to be able
> to
> > login to any of the standard OFBiz apps.  The required base permissions
> can
> > be found in each app's ofbiz-component.xml.
> >
> > As always your best reference for setting up data is the demo data.  If
> > something isn't working with your data you should always compare it to
> the
> > demo data first.
> >
> > Regards
> > Scott
> >
> > 2008/5/24 Bruno Busco <[hidden email]>:
> >
> > > Hi,
> > > I am in the process of defining security groups of my system users.
> > >
> > > Trying to redefine a catalog limited administrator security group I
> have
> > > noted that if I remove the CATALOG_VIEW permission from the
> > > CATALOGADMIN_LTD
> > > security group a user of this group cannot login to the catalog
> > application
> > > (and this is fine).
> > >
> > > But if I add the CATALOG_VIEW permission back into the CATALOGADMIN_LTD
> > > security group the user still is unable to login.
> > > One more test I have done is to create a new security group and to add
> to
> > > it
> > > the same permissions of the CATALOGADMIN_LTD group.
> > > A user with the new group cannot login to the catalog application.
> > >
> > > Am I missing some step in the process or this is a bug?
> > >
> > > Many thanks,
> > > Bruno
> > >
> >
>

[Bruno Busco]

YES !!!!! It was !!!!
Thank you!  :-)

So it is by design? Or should I create a JIRA issue ?

-Bruno

2008/5/24 Scott Gray <[hidden email]>:

> You'll probably find that is caused by some sort of caching issue, try
> clearing the cache in webtools.
>
> Scott
>
> 2008/5/24 Bruno Busco <[hidden email]>:
>
> > Scott,
> > I have tryed the following procedure right now on the demo server:
> > 1) login as admin/ofbiz
> > 2) created a new Customer test/ofbiz
> > 3) added the CATALOGADMIN_LTD security group to the test user
> > 4) login as test/ofbiz to the catalog application --> OK
> > 5) login again as admin/ofbiz
> > 6) removed the CATALOG_VIEW permission from the CATALOGADMIN_LTD security
> > group
> > 7) login as test/ofbiz to the catalog application --> FAILED (AS
> EXPECTED)
> > 8) login as admin/ofbiz
> > 9) added the CATALOG_VIEW permission to the CATALOGADMIN_LTD security
> group
> > 10) login as test/ofbiz to the catalog application --> !!!!! FAILED
> !!!!!!!
> >
> > If you go on the demo server right now you should still see the problem.
> >
> > -Bruno
> >
> >
> > 2008/5/24 Scott Gray <[hidden email]>:
> >
> > > Hi Bruno
> > >
> > > Your users need to have the base permission OFBTOOLS in order to be
> able
> > to
> > > login to any of the standard OFBiz apps.  The required base permissions
> > can
> > > be found in each app's ofbiz-component.xml.
> > >
> > > As always your best reference for setting up data is the demo data.  If
> > > something isn't working with your data you should always compare it to
> > the
> > > demo data first.
> > >
> > > Regards
> > > Scott
> > >
> > > 2008/5/24 Bruno Busco <[hidden email]>:
> > >
> > > > Hi,
> > > > I am in the process of defining security groups of my system users.
> > > >
> > > > Trying to redefine a catalog limited administrator security group I
> > have
> > > > noted that if I remove the CATALOG_VIEW permission from the
> > > > CATALOGADMIN_LTD
> > > > security group a user of this group cannot login to the catalog
> > > application
> > > > (and this is fine).
> > > >
> > > > But if I add the CATALOG_VIEW permission back into the
> CATALOGADMIN_LTD
> > > > security group the user still is unable to login.
> > > > One more test I have done is to create a new security group and to
> add
> > to
> > > > it
> > > > the same permissions of the CATALOGADMIN_LTD group.
> > > > A user with the new group cannot login to the catalog application.
> > > >
> > > > Am I missing some step in the process or this is a bug?
> > > >
> > > > Many thanks,
> > > > Bruno
> > > >
> > >
> >
>

[Scott Gray]

To be honest I wouldn't have a clue, I'm sure it's probably been discussed
at some point, you could try searching on nabble or markmail if you wanted.

Regards
Scott

2008/5/24 Bruno Busco <[hidden email]>:

> YES !!!!! It was !!!!
> Thank you!  :-)
>
> So it is by design? Or should I create a JIRA issue ?
>
> -Bruno
>
> 2008/5/24 Scott Gray <[hidden email]>:
>
> > You'll probably find that is caused by some sort of caching issue, try
> > clearing the cache in webtools.
> >
> > Scott
> >
> > 2008/5/24 Bruno Busco <[hidden email]>:
> >
> > > Scott,
> > > I have tryed the following procedure right now on the demo server:
> > > 1) login as admin/ofbiz
> > > 2) created a new Customer test/ofbiz
> > > 3) added the CATALOGADMIN_LTD security group to the test user
> > > 4) login as test/ofbiz to the catalog application --> OK
> > > 5) login again as admin/ofbiz
> > > 6) removed the CATALOG_VIEW permission from the CATALOGADMIN_LTD
> security
> > > group
> > > 7) login as test/ofbiz to the catalog application --> FAILED (AS
> > EXPECTED)
> > > 8) login as admin/ofbiz
> > > 9) added the CATALOG_VIEW permission to the CATALOGADMIN_LTD security
> > group
> > > 10) login as test/ofbiz to the catalog application --> !!!!! FAILED
> > !!!!!!!
> > >
> > > If you go on the demo server right now you should still see the
> problem.
> > >
> > > -Bruno
> > >
> > >
> > > 2008/5/24 Scott Gray <[hidden email]>:
> > >
> > > > Hi Bruno
> > > >
> > > > Your users need to have the base permission OFBTOOLS in order to be
> > able
> > > to
> > > > login to any of the standard OFBiz apps.  The required base
> permissions
> > > can
> > > > be found in each app's ofbiz-component.xml.
> > > >
> > > > As always your best reference for setting up data is the demo data.
>  If
> > > > something isn't working with your data you should always compare it
> to
> > > the
> > > > demo data first.
> > > >
> > > > Regards
> > > > Scott
> > > >
> > > > 2008/5/24 Bruno Busco <[hidden email]>:
> > > >
> > > > > Hi,
> > > > > I am in the process of defining security groups of my system users.
> > > > >
> > > > > Trying to redefine a catalog limited administrator security group I
> > > have
> > > > > noted that if I remove the CATALOG_VIEW permission from the
> > > > > CATALOGADMIN_LTD
> > > > > security group a user of this group cannot login to the catalog
> > > > application
> > > > > (and this is fine).
> > > > >
> > > > > But if I add the CATALOG_VIEW permission back into the
> > CATALOGADMIN_LTD
> > > > > security group the user still is unable to login.
> > > > > One more test I have done is to create a new security group and to
> > add
> > > to
> > > > > it
> > > > > the same permissions of the CATALOGADMIN_LTD group.
> > > > > A user with the new group cannot login to the catalog application.
> > > > >
> > > > > Am I missing some step in the process or this is a bug?
> > > > >
> > > > > Many thanks,
> > > > > Bruno
> > > > >
> > > >
> > >
> >
>