This may help,
http://docs.ofbiz.org/display/OFBTECH/OFBiz+securitybut beware some changes are going on in this area
https://issues.apache.org/jira/browse/OFBIZ-2380Jacques
From: "Alan" <
[hidden email]>
> Hi
>
> I am having trouble with security and permissions on a webapp. My
> understanding is that I have to associate new customers with permissions
> to make ledger entries (specifically ACCTG_ATX_CREATE, ACCTG_ATX_ADMIN).
> This concerns me as AccountingSecurityData.xml says these should be
> given only to accountants.
>
> However, I need some help in assigning these permissions to the Customer
> role as defined in CustomerEvents.xml in the line
>
> <set value="CUSTOMER" field="parameters.roleTypeId"/>
>
> Any help or pointers gratefully appreciated.
>
> TIA
>
> Alan
>
>