Confusing documentation on security

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

Confusing documentation on security

taher
After thoroughly reading https://cwiki.apache.org/OFBTECH/ofbiz-security.html I am still quite confused by the section "Security Roles".

Essentially, there are two steps to create a security role one of them is creating a SecurityPermission having the form WEBAPP_ROLE_ACTION and the other one is very confusing and I cannot understand it. It says "a user is assigned the ORDERMGR_VIEW permission, and is associated to a particular facility (let's say XYZ Company) with the ORDERMGR_ROLE_UPDATE"

What does it mean by associated to a particular facility? what is the association? on which entity? and how? Given that security roles attach to UserLogin, I can't find any entity to satisfy this requirement!

Appreciate all the help