OFBiz › OFBiz - Dev

Move 'SecurityPermission' data to seed data files

_‹ Previous Topic Next Topic _›

Classic

List

Threaded

7 messages Options

Priya Sharma-2

Move 'SecurityPermission' data to seed data files

Hello All,

As per discussion on
https://issues.apache.org/jira/browse/OFBIZ-10575, we would like to
confirm whether all security data (i.e SecurityPermission,
SecurityGroupPermission and hence SecurityGroup) be moved to seed data
files or only SecurityPermission data.

Is there any particular use-case that may be harmed or any other
potential security threat that may arise with this change?

Please provide your feedback, concerns, or suggestions.

--
Best Regards,
Priya

Pawan Verma

Re: Move 'SecurityPermission' data to seed data files

Hi Priya,

I opinion would be to move SG, SP, SGP data to seed data files.
--
Thanks & Regards
Pawan Verma
Technical Consultant
*HotWax Systems*
*Enterprise open source experts*
http://www.hotwaxsystems.com

On Fri, Jul 31, 2020 at 5:43 PM Priya Sharma <[hidden email]>
wrote:

> Hello All,
>
> As per discussion on
> https://issues.apache.org/jira/browse/OFBIZ-10575, we would like to
> confirm whether all security data (i.e SecurityPermission,
> SecurityGroupPermission and hence SecurityGroup) be moved to seed data
> files or only SecurityPermission data.
>
> Is there any particular use-case that may be harmed or any other
> potential security threat that may arise with this change?
>
> Please provide your feedback, concerns, or suggestions.
>
> --
> Best Regards,
> Priya
>

Deepak Dixit-5

Re: Move 'SecurityPermission' data to seed data files

In reply to this post by Priya Sharma-2

IMO SecurityPermission data should be moved to Seed data,
and SecurityGroup and SecurityGroupPermission data is part of demo data

Thanks & Regards
--
Deepak Dixit
ofbiz.apache.org

On Fri, Jul 31, 2020 at 5:43 PM Priya Sharma <[hidden email]>
wrote:

Devanshu Vyas-2

Re: Move 'SecurityPermission' data to seed data files

I agree with Deepak here that SecurityPermission is seed data and rest is a
part of demo data.

But, I would like to raise a point here that some SecurityGroup and
SecurityGroupPermission data can also be a part of seed data. Like for
example, SUPER.
Maybe, we can differentiate which SecurityGroup and SecurityGroupPermission
data should be a part of seed data as well.

Thanks & Regards,
Devanshu Vyas.

On Tue, Aug 4, 2020 at 2:31 PM Deepak Dixit <[hidden email]> wrote:

> IMO SecurityPermission data should be moved to Seed data,
> and SecurityGroup and SecurityGroupPermission data is part of demo data
>
> Thanks & Regards
> --
> Deepak Dixit
> ofbiz.apache.org
>
>
> On Fri, Jul 31, 2020 at 5:43 PM Priya Sharma <[hidden email]>
> wrote:
>
> > Hello All,
> >
> > As per discussion on
> > https://issues.apache.org/jira/browse/OFBIZ-10575, we would like to
> > confirm whether all security data (i.e SecurityPermission,
> > SecurityGroupPermission and hence SecurityGroup) be moved to seed data
> > files or only SecurityPermission data.
> >
> > Is there any particular use-case that may be harmed or any other
> > potential security threat that may arise with this change?
> >
> > Please provide your feedback, concerns, or suggestions.
> >
> > --
> > Best Regards,
> > Priya
> >
>

Priya Sharma-2

Re: Move 'SecurityPermission' data to seed data files

Thanks everyone for your responses.
@Devanshu, security data for the "SUPER" user is already part of seed
data for most components.

As per the above discussion, we can conclude to move only the
SecurityPermission data to seed data files. (OFBIZ-10575)

If anyone still wants to add something, you are always welcome.

On Tue, 4 Aug 2020 at 15:02, Devanshu Vyas <[hidden email]> wrote:

>
> I agree with Deepak here that SecurityPermission is seed data and rest is a
> part of demo data.
>
> But, I would like to raise a point here that some SecurityGroup and
> SecurityGroupPermission data can also be a part of seed data. Like for
> example, SUPER.
> Maybe, we can differentiate which SecurityGroup and SecurityGroupPermission
> data should be a part of seed data as well.
>
> Thanks & Regards,
> Devanshu Vyas.
>
>
> On Tue, Aug 4, 2020 at 2:31 PM Deepak Dixit <[hidden email]> wrote:
>
> > IMO SecurityPermission data should be moved to Seed data,
> > and SecurityGroup and SecurityGroupPermission data is part of demo data
> >
> > Thanks & Regards
> > --
> > Deepak Dixit
> > ofbiz.apache.org
> >
> >
> > On Fri, Jul 31, 2020 at 5:43 PM Priya Sharma <[hidden email]>
> > wrote:
> >
> > > Hello All,
> > >
> > > As per discussion on
> > > https://issues.apache.org/jira/browse/OFBIZ-10575, we would like to
> > > confirm whether all security data (i.e SecurityPermission,
> > > SecurityGroupPermission and hence SecurityGroup) be moved to seed data
> > > files or only SecurityPermission data.
> > >
> > > Is there any particular use-case that may be harmed or any other
> > > potential security threat that may arise with this change?
> > >
> > > Please provide your feedback, concerns, or suggestions.
> > >
> > > --
> > > Best Regards,
> > > Priya
> > >
> >

--
Best Regards,
Priya

Jacques Le Roux

Re: Move 'SecurityPermission' data to seed data files

Administrator

Hi Priya,

I agree that only SecurityPermission are seed data.

+1 for OFBIZ-10575

Jacques

Le 10/08/2020 à 06:46, Priya Sharma a écrit :

> Thanks everyone for your responses.
> @Devanshu, security data for the "SUPER" user is already part of seed
> data for most components.
>
> As per the above discussion, we can conclude to move only the
> SecurityPermission data to seed data files. (OFBIZ-10575)
>
> If anyone still wants to add something, you are always welcome.
>
> On Tue, 4 Aug 2020 at 15:02, Devanshu Vyas <[hidden email]> wrote:
>> I agree with Deepak here that SecurityPermission is seed data and rest is a
>> part of demo data.
>>
>> But, I would like to raise a point here that some SecurityGroup and
>> SecurityGroupPermission data can also be a part of seed data. Like for
>> example, SUPER.
>> Maybe, we can differentiate which SecurityGroup and SecurityGroupPermission
>> data should be a part of seed data as well.
>>
>> Thanks & Regards,
>> Devanshu Vyas.
>>
>>
>> On Tue, Aug 4, 2020 at 2:31 PM Deepak Dixit <[hidden email]> wrote:
>>
>>> IMO SecurityPermission data should be moved to Seed data,
>>> and SecurityGroup and SecurityGroupPermission data is part of demo data
>>>
>>> Thanks & Regards
>>> --
>>> Deepak Dixit
>>> ofbiz.apache.org
>>>
>>>
>>> On Fri, Jul 31, 2020 at 5:43 PM Priya Sharma <[hidden email]>
>>> wrote:
>>>
>>>> Hello All,
>>>>
>>>> As per discussion on
>>>> https://issues.apache.org/jira/browse/OFBIZ-10575, we would like to
>>>> confirm whether all security data (i.e SecurityPermission,
>>>> SecurityGroupPermission and hence SecurityGroup) be moved to seed data
>>>> files or only SecurityPermission data.
>>>>
>>>> Is there any particular use-case that may be harmed or any other
>>>> potential security threat that may arise with this change?
>>>>
>>>> Please provide your feedback, concerns, or suggestions.
>>>>
>>>> --
>>>> Best Regards,
>>>> Priya
>>>>
>
>

Priya Sharma-2

Re: Move 'SecurityPermission' data to seed data files

Thanks, @Jacques Le Roux
I have provided a patch for this improvement.

On Mon, 10 Aug 2020 at 20:00, Jacques Le Roux
<[hidden email]> wrote:

>
> Hi Priya,
>
> I agree that only SecurityPermission are seed data.
>
> +1 for OFBIZ-10575
>
> Jacques
>
> Le 10/08/2020 à 06:46, Priya Sharma a écrit :
> > Thanks everyone for your responses.
> > @Devanshu, security data for the "SUPER" user is already part of seed
> > data for most components.
> >
> > As per the above discussion, we can conclude to move only the
> > SecurityPermission data to seed data files. (OFBIZ-10575)
> >
> > If anyone still wants to add something, you are always welcome.
> >
> > On Tue, 4 Aug 2020 at 15:02, Devanshu Vyas <[hidden email]> wrote:
> >> I agree with Deepak here that SecurityPermission is seed data and rest is a
> >> part of demo data.
> >>
> >> But, I would like to raise a point here that some SecurityGroup and
> >> SecurityGroupPermission data can also be a part of seed data. Like for
> >> example, SUPER.
> >> Maybe, we can differentiate which SecurityGroup and SecurityGroupPermission
> >> data should be a part of seed data as well.
> >>
> >> Thanks & Regards,
> >> Devanshu Vyas.
> >>
> >>
> >> On Tue, Aug 4, 2020 at 2:31 PM Deepak Dixit <[hidden email]> wrote:
> >>
> >>> IMO SecurityPermission data should be moved to Seed data,
> >>> and SecurityGroup and SecurityGroupPermission data is part of demo data
> >>>
> >>> Thanks & Regards
> >>> --
> >>> Deepak Dixit
> >>> ofbiz.apache.org
> >>>
> >>>
> >>> On Fri, Jul 31, 2020 at 5:43 PM Priya Sharma <[hidden email]>
> >>> wrote:
> >>>
> >>>> Hello All,
> >>>>
> >>>> As per discussion on
> >>>> https://issues.apache.org/jira/browse/OFBIZ-10575, we would like to
> >>>> confirm whether all security data (i.e SecurityPermission,
> >>>> SecurityGroupPermission and hence SecurityGroup) be moved to seed data
> >>>> files or only SecurityPermission data.
> >>>>
> >>>> Is there any particular use-case that may be harmed or any other
> >>>> potential security threat that may arise with this change?
> >>>>
> >>>> Please provide your feedback, concerns, or suggestions.
> >>>>
> >>>> --
> >>>> Best Regards,
> >>>> Priya
> >>>>
> >
> >

--
Best Regards,
Priya