Security Permission being Viewable

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

Security Permission being Viewable

simon maskell
Hi

We are looking at ways of being able to show permissions on any page inside Ofbiz, this will allow us to easily see how the security for a page is managed. Liferay does this very well, from any page you are able to go into edit mode and view how the page is setup from a security level.

Because the security permissions are hard coded in Ofbiz we are struggling to find a way of doing this.

Has anyone got a solution for this or if other people see this as an issue can we look to make a change to how Ofbiz does the permissions? I have no ideas around this for the moment and I know it probably wont be a small task!!!

Simon

Reply | Threaded
Open this post in threaded view
|

Re: Security Permission being Viewable

Adrian Crum-3
There was a security redesign that was discussed a few years ago, but
interest in it dropped off:

https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Security+Redesign

Adrian Crum
Sandglass Software
www.sandglass-software.com

On 11/6/2015 1:04 AM, simon maskell wrote:

> Hi
>
> We are looking at ways of being able to show permissions on any page inside
> Ofbiz, this will allow us to easily see how the security for a page is
> managed. Liferay does this very well, from any page you are able to go into
> edit mode and view how the page is setup from a security level.
>
> Because the security permissions are hard coded in Ofbiz we are struggling
> to find a way of doing this.
>
> Has anyone got a solution for this or if other people see this as an issue
> can we look to make a change to how Ofbiz does the permissions? I have no
> ideas around this for the moment and I know it probably wont be a small
> task!!!
>
> Simon
>
>
>
>
>
> --
> View this message in context: http://ofbiz.135035.n4.nabble.com/Security-Permission-being-Viewable-tp4674195.html
> Sent from the OFBiz - Dev mailing list archive at Nabble.com.
>
Reply | Threaded
Open this post in threaded view
|

Re: Security Permission being Viewable

Hans Bakker
In reply to this post by simon maskell
Hi Simon,

like all screens can be listed from the screen xml files, it should also
be possible to get the related security rules from the screen
implementation. Security is also implemented in the related services
what can be more difficult because related services names and operation
can differ from the data entered on the screen.....

You could replace the current security system and make it memory based
on the screenname/action -> security group and servicename/action ->
security group relationship. Still also a solution is needed for the
databased  data owner security rules....which could be defined as a
special action.....

Just some thoughts......

Regards,
Hans

On 06/11/15 16:04, simon maskell wrote:

> Hi
>
> We are looking at ways of being able to show permissions on any page inside
> Ofbiz, this will allow us to easily see how the security for a page is
> managed. Liferay does this very well, from any page you are able to go into
> edit mode and view how the page is setup from a security level.
>
> Because the security permissions are hard coded in Ofbiz we are struggling
> to find a way of doing this.
>
> Has anyone got a solution for this or if other people see this as an issue
> can we look to make a change to how Ofbiz does the permissions? I have no
> ideas around this for the moment and I know it probably wont be a small
> task!!!
>
> Simon
>
>
>
>
>
> --
> View this message in context: http://ofbiz.135035.n4.nabble.com/Security-Permission-being-Viewable-tp4674195.html
> Sent from the OFBiz - Dev mailing list archive at Nabble.com.


--

Regards,

Hans Bakker
CEO, http://antwebsystems.com