After thoroughly reading
https://cwiki.apache.org/OFBTECH/ofbiz-security.html I am still quite confused by the section "Security Roles".
Essentially, there are two steps to create a security role one of them is creating a SecurityPermission having the form WEBAPP_ROLE_ACTION and the other one is very confusing and I cannot understand it. It says "a user is assigned the ORDERMGR_VIEW permission, and is associated to a particular facility (let's say XYZ Company) with the ORDERMGR_ROLE_UPDATE"
What does it mean by associated to a particular facility? what is the association? on which entity? and how? Given that security roles attach to UserLogin, I can't find any entity to satisfy this requirement!
Appreciate all the help