Permissions Profiling

[Ryan Moriarty]

I've been asked to do a review of user permissions in our OFBiz
installation. Is there any good method (besides searching through the code
base one-by-one) of determining what services and screens a user has access
to, given a certain SecurityPermission?  Perhaps XPath queries against
service definitions and implementations? If anyone else has done this and
has ideas, I would appreciate the input.

[Todd Thorner]

Heck, I'd appreciate a table to that effect within the wiki.


Just saying.



On 17-03-30 04:23 PM, Ryan Moriarty wrote:
> I've been asked to do a review of user permissions in our OFBiz
> installation. Is there any good method (besides searching through the code
> base one-by-one) of determining what services and screens a user has access
> to, given a certain SecurityPermission?  Perhaps XPath queries against
> service definitions and implementations? If anyone else has done this and
> has ideas, I would appreciate the input.
>

[taher]

Hi Ryan,

Maybe just a simple find + grep would do the trick.

On Mar 31, 2017 2:24 AM, "Ryan Moriarty" <[hidden email]>
wrote:

I've been asked to do a review of user permissions in our OFBiz
installation. Is there any good method (besides searching through the code
base one-by-one) of determining what services and screens a user has access
to, given a certain SecurityPermission?  Perhaps XPath queries against
service definitions and implementations? If anyone else has done this and
has ideas, I would appreciate the input.