New Plugin

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

New Plugin

Robert Wynkoop
All,

Working with the 18.12.

Added a plugin.

I wanted to test removing security.

From the new plugin dir, I removed base-permission="OFBTOOLS,DEMO" from
ofbiz-component.xml.

Also tried messing with the permission check in CommonScreens.xml(in demo).

No joy, still have to have a login to connect.  admin / ofbiz was tested.

How do I disable login for the component? I will use page level permissions
later.

Robert Wynkoop
Reply | Threaded
Open this post in threaded view
|

Re: New Plugin

adityasharma
Hi Robert,

I think you need to set auth to false for your request in controller.xml
file

    <request-map uri="autoLogout">
        <security https="true" auth="false"/>
        <event type="java"
path="org.apache.ofbiz.webapp.control.LoginWorker"
invoke="autoLoginRemove"/>
        <response name="success" type="request-redirect-noparam"
value="main"/>
        <response name="error" type="view" value="main"/>
    </request-map>

HTH

Thanks and regards
Aditya Sharma

On Fri, Dec 20, 2019 at 9:34 AM Robert Wynkoop <[hidden email]>
wrote:

> All,
>
> Working with the 18.12.
>
> Added a plugin.
>
> I wanted to test removing security.
>
> From the new plugin dir, I removed base-permission="OFBTOOLS,DEMO" from
> ofbiz-component.xml.
>
> Also tried messing with the permission check in CommonScreens.xml(in demo).
>
> No joy, still have to have a login to connect.  admin / ofbiz was tested.
>
> How do I disable login for the component? I will use page level permissions
> later.
>
> Robert Wynkoop
>
Reply | Threaded
Open this post in threaded view
|

Re: New Plugin

Robert Wynkoop
Aditya,

Thanks for the help.  That was it.

This is way different from the day to day corporate sites I work on.

I noticed my page decorator is no longer showing, assuming because now it
does not have the correct permissions.



On Thu, Dec 19, 2019 at 10:33 PM Aditya Sharma <[hidden email]>
wrote:

> Hi Robert,
>
> I think you need to set auth to false for your request in controller.xml
> file
>
>     <request-map uri="autoLogout">
>         <security https="true" auth="false"/>
>         <event type="java"
> path="org.apache.ofbiz.webapp.control.LoginWorker"
> invoke="autoLoginRemove"/>
>         <response name="success" type="request-redirect-noparam"
> value="main"/>
>         <response name="error" type="view" value="main"/>
>     </request-map>
>
> HTH
>
> Thanks and regards
> Aditya Sharma
>
> On Fri, Dec 20, 2019 at 9:34 AM Robert Wynkoop <[hidden email]>
> wrote:
>
> > All,
> >
> > Working with the 18.12.
> >
> > Added a plugin.
> >
> > I wanted to test removing security.
> >
> > From the new plugin dir, I removed base-permission="OFBTOOLS,DEMO" from
> > ofbiz-component.xml.
> >
> > Also tried messing with the permission check in CommonScreens.xml(in
> demo).
> >
> > No joy, still have to have a login to connect.  admin / ofbiz was tested.
> >
> > How do I disable login for the component? I will use page level
> permissions
> > later.
> >
> > Robert Wynkoop
> >
>


--
Robert Wynkoop
Google Voice: 314-380-0046
Cell: 314-606-3079
Home: 314-846-7638

2904 Woodbridge Estates Dr.
Saint Louis, MO 63129