Setting product admin permissions on a store or catalog

[DeedraF]

I am very new to OFBiz.  My dev team is working through the technical details and I am trying to handle the more 'front end' setup activities.  Not finding very many 'exact steps' or documentation to use as a guide, I thought perhaps someone reading this post could help out??

I have created a store, catalog, products...and would like to now assign specific permissions accordingly.  I do not want all my ADMINs to have the same full access to a catalog.  As a matter of fact, I would like to create a 'Product Admin' allowing that person/group to simply Add, Edit, and Delete products in a specific store catalog.  Is this a standard feature in OFBiz that I am just not grasping how to accomplish?  If it is, please provide steps that might help me accomplish this task.

Thanks in advance for your help with this issue.
 

[Ruth Hoffman-2]

Hi DeedraF:
I think this has been answer before on this list not too long ago.

Out-of-the-box, you can't do this with any existing OFBiz applications.
Basically, the best you can do is limit access to certain users
(belonging to security groups) by store.

To regulate access to specific products in a catalog on the same website
(or "store"), you will need to write some code.

Regards,
Ruth
----------------------------------------------------
Find me on the web at http://www.myofbiz.com or Google keyword "myofbiz"
[hidden email]

DeedraF wrote:

> I am very new to OFBiz.  My dev team is working through the technical details
> and I am trying to handle the more 'front end' setup activities.  Not
> finding very many 'exact steps' or documentation to use as a guide, I
> thought perhaps someone reading this post could help out??
>
> I have created a store, catalog, products...and would like to now assign
> specific permissions accordingly.  I do not want all my ADMINs to have the
> same full access to a catalog.  As a matter of fact, I would like to create
> a 'Product Admin' allowing that person/group to simply Add, Edit, and Delete
> products in a specific store catalog.  Is this a standard feature in OFBiz
> that I am just not grasping how to accomplish?  If it is, please provide
> steps that might help me accomplish this task.
>
> Thanks in advance for your help with this issue.
>  
>  

[David E. Jones-2]

I think Deedra is talking about product administration and not about access to products in the ecommerce store.

There is actually some functionality to give more limited permissions to certain users. Instead of giving a user the full create, update and delete permissions for the catalog manager give them the "role limited" permissions. Then (as a different user that has permission to do so) associate them with a catalog in a certain role (which I've forgotten off the top of my head, sorry) and then they will be able to update products only in that category, and categories under that category (note that any category can be "under" more than one category at a time, so typically these categories will be under one or more categories for permission purposes, and one or more categories for customer browsing purposes, and possibly other categories for other purposes).

If you want more something different than this then some code changing will be necessary because of how permissions are currently implemented in OFBiz.

-David


On Feb 5, 2010, at 6:49 PM, Ruth Hoffman wrote:

> Hi DeedraF:
> I think this has been answer before on this list not too long ago.
>
> Out-of-the-box, you can't do this with any existing OFBiz applications. Basically, the best you can do is limit access to certain users (belonging to security groups) by store.
>
> To regulate access to specific products in a catalog on the same website (or "store"), you will need to write some code.
>
> Regards,
> Ruth
> ----------------------------------------------------
> Find me on the web at http://www.myofbiz.com or Google keyword "myofbiz"
> [hidden email]
>
> DeedraF wrote:
>> I am very new to OFBiz.  My dev team is working through the technical details
>> and I am trying to handle the more 'front end' setup activities.  Not
>> finding very many 'exact steps' or documentation to use as a guide, I
>> thought perhaps someone reading this post could help out??
>>
>> I have created a store, catalog, products...and would like to now assign
>> specific permissions accordingly.  I do not want all my ADMINs to have the
>> same full access to a catalog.  As a matter of fact, I would like to create
>> a 'Product Admin' allowing that person/group to simply Add, Edit, and Delete
>> products in a specific store catalog.  Is this a standard feature in OFBiz
>> that I am just not grasping how to accomplish?  If it is, please provide
>> steps that might help me accomplish this task.
>>
>> Thanks in advance for your help with this issue.
>>  

[Ruth Hoffman-2]

Hi David:
I tried your solution. It causes errors in the trunk and in version
9.04. Since it is not documented anywhere how to do this, its pretty
hard to report it as an error or a bug.

Regards,
Ruth

David E Jones wrote:

> I think Deedra is talking about product administration and not about access to products in the ecommerce store.
>
> There is actually some functionality to give more limited permissions to certain users. Instead of giving a user the full create, update and delete permissions for the catalog manager give them the "role limited" permissions. Then (as a different user that has permission to do so) associate them with a catalog in a certain role (which I've forgotten off the top of my head, sorry) and then they will be able to update products only in that category, and categories under that category (note that any category can be "under" more than one category at a time, so typically these categories will be under one or more categories for permission purposes, and one or more categories for customer browsing purposes, and possibly other categories for other purposes).
>
> If you want more something different than this then some code changing will be necessary because of how permissions are currently implemented in OFBiz.
>
> -David
>
>
> On Feb 5, 2010, at 6:49 PM, Ruth Hoffman wrote:
>
>  
>> Hi DeedraF:
>> I think this has been answer before on this list not too long ago.
>>
>> Out-of-the-box, you can't do this with any existing OFBiz applications. Basically, the best you can do is limit access to certain users (belonging to security groups) by store.
>>
>> To regulate access to specific products in a catalog on the same website (or "store"), you will need to write some code.
>>
>> Regards,
>> Ruth
>> ----------------------------------------------------
>> Find me on the web at http://www.myofbiz.com or Google keyword "myofbiz"
>> [hidden email]
>>
>> DeedraF wrote:
>>    
>>> I am very new to OFBiz.  My dev team is working through the technical details
>>> and I am trying to handle the more 'front end' setup activities.  Not
>>> finding very many 'exact steps' or documentation to use as a guide, I
>>> thought perhaps someone reading this post could help out??
>>>
>>> I have created a store, catalog, products...and would like to now assign
>>> specific permissions accordingly.  I do not want all my ADMINs to have the
>>> same full access to a catalog.  As a matter of fact, I would like to create
>>> a 'Product Admin' allowing that person/group to simply Add, Edit, and Delete
>>> products in a specific store catalog.  Is this a standard feature in OFBiz
>>> that I am just not grasping how to accomplish?  If it is, please provide
>>> steps that might help me accomplish this task.
>>>
>>> Thanks in advance for your help with this issue.
>>>  
>>>      
>
>
>  

[Ruth Hoffman-2]

Sorry David:

I believe you are correct in that I misunderstood the question. What I
should have said to you is: I have tried adding roles and roletypes to
products, categories and catalogs in both the trunk and version 9.04 and
it does not work or is broken. I don't know which since I'm not 100%
certain how to set this up. I tried several scenarios none of which
work. The best I was able to achieve was controlled access to the
Catalog Manager based on security groups.

Regards,
Ruth

Ruth Hoffman wrote:

> Hi David:
> I tried your solution. It causes errors in the trunk and in version
> 9.04. Since it is not documented anywhere how to do this, its pretty
> hard to report it as an error or a bug.
>
> Regards,
> Ruth
>
> David E Jones wrote:
>> I think Deedra is talking about product administration and not about
>> access to products in the ecommerce store.
>>
>> There is actually some functionality to give more limited permissions
>> to certain users. Instead of giving a user the full create, update
>> and delete permissions for the catalog manager give them the "role
>> limited" permissions. Then (as a different user that has permission
>> to do so) associate them with a catalog in a certain role (which I've
>> forgotten off the top of my head, sorry) and then they will be able
>> to update products only in that category, and categories under that
>> category (note that any category can be "under" more than one
>> category at a time, so typically these categories will be under one
>> or more categories for permission purposes, and one or more
>> categories for customer browsing purposes, and possibly other
>> categories for other purposes).
>>
>> If you want more something different than this then some code
>> changing will be necessary because of how permissions are currently
>> implemented in OFBiz.
>>
>> -David
>>
>>
>> On Feb 5, 2010, at 6:49 PM, Ruth Hoffman wrote:
>>
>>  
>>> Hi DeedraF:
>>> I think this has been answer before on this list not too long ago.
>>>
>>> Out-of-the-box, you can't do this with any existing OFBiz
>>> applications. Basically, the best you can do is limit access to
>>> certain users (belonging to security groups) by store.
>>>
>>> To regulate access to specific products in a catalog on the same
>>> website (or "store"), you will need to write some code.
>>>
>>> Regards,
>>> Ruth
>>> ----------------------------------------------------
>>> Find me on the web at http://www.myofbiz.com or Google keyword
>>> "myofbiz"
>>> [hidden email]
>>>
>>> DeedraF wrote:
>>>    
>>>> I am very new to OFBiz.  My dev team is working through the
>>>> technical details
>>>> and I am trying to handle the more 'front end' setup activities.  Not
>>>> finding very many 'exact steps' or documentation to use as a guide, I
>>>> thought perhaps someone reading this post could help out??
>>>>
>>>> I have created a store, catalog, products...and would like to now
>>>> assign
>>>> specific permissions accordingly.  I do not want all my ADMINs to
>>>> have the
>>>> same full access to a catalog.  As a matter of fact, I would like
>>>> to create
>>>> a 'Product Admin' allowing that person/group to simply Add, Edit,
>>>> and Delete
>>>> products in a specific store catalog.  Is this a standard feature
>>>> in OFBiz
>>>> that I am just not grasping how to accomplish?  If it is, please
>>>> provide
>>>> steps that might help me accomplish this task.
>>>>
>>>> Thanks in advance for your help with this issue.
>>>>        
>>
>>
>>  
>

[Jacques Le Roux-2-2]

This page may be helpful to have a beginning of an idea (it gives some pointers) on how roles and permissions are used together in
OFBiz to achieve what David is talking about
http://cwiki.apache.org/confluence/display/OFBTECH/OFBiz+security

HTH

Jacques

From: "David E Jones" <[hidden email]>

> I think Deedra is talking about product administration and not about access to products in the ecommerce store.
>
> There is actually some functionality to give more limited permissions to certain users. Instead of giving a user the full create,
> update and delete permissions for the catalog manager give them the "role limited" permissions. Then (as a different user that has
> permission to do so) associate them with a catalog in a certain role (which I've forgotten off the top of my head, sorry) and then
> they will be able to update products only in that category, and categories under that category (note that any category can be
> "under" more than one category at a time, so typically these categories will be under one or more categories for permission
> purposes, and one or more categories for customer browsing purposes, and possibly other categories for other purposes).
>
> If you want more something different than this then some code changing will be necessary because of how permissions are currently
> implemented in OFBiz.
>
> -David
>
>
> On Feb 5, 2010, at 6:49 PM, Ruth Hoffman wrote:
>
>> Hi DeedraF:
>> I think this has been answer before on this list not too long ago.
>>
>> Out-of-the-box, you can't do this with any existing OFBiz applications. Basically, the best you can do is limit access to certain
>> users (belonging to security groups) by store.
>>
>> To regulate access to specific products in a catalog on the same website (or "store"), you will need to write some code.
>>
>> Regards,
>> Ruth
>> ----------------------------------------------------
>> Find me on the web at http://www.myofbiz.com or Google keyword "myofbiz"
>> [hidden email]
>>
>> DeedraF wrote:
>>> I am very new to OFBiz.  My dev team is working through the technical details
>>> and I am trying to handle the more 'front end' setup activities.  Not
>>> finding very many 'exact steps' or documentation to use as a guide, I
>>> thought perhaps someone reading this post could help out??
>>>
>>> I have created a store, catalog, products...and would like to now assign
>>> specific permissions accordingly.  I do not want all my ADMINs to have the
>>> same full access to a catalog.  As a matter of fact, I would like to create
>>> a 'Product Admin' allowing that person/group to simply Add, Edit, and Delete
>>> products in a specific store catalog.  Is this a standard feature in OFBiz
>>> that I am just not grasping how to accomplish?  If it is, please provide
>>> steps that might help me accomplish this task.
>>>
>>> Thanks in advance for your help with this issue.
>>>
>

[Jacques Le Roux-2-2]

http://cwiki.apache.org/confluence/display/OFBTECH/OFBiz+security

Jacques

From: "Ruth Hoffman" <[hidden email]>

> Hi David:
> I tried your solution. It causes errors in the trunk and in version 9.04. Since it is not documented anywhere how to do this, its
> pretty hard to report it as an error or a bug.
>
> Regards,
> Ruth
>
> David E Jones wrote:
>> I think Deedra is talking about product administration and not about access to products in the ecommerce store.
>>
>> There is actually some functionality to give more limited permissions to certain users. Instead of giving a user the full create,
>> update and delete permissions for the catalog manager give them the "role limited" permissions. Then (as a different user that
>> has permission to do so) associate them with a catalog in a certain role (which I've forgotten off the top of my head, sorry) and
>> then they will be able to update products only in that category, and categories under that category (note that any category can
>> be "under" more than one category at a time, so typically these categories will be under one or more categories for permission
>> purposes, and one or more categories for customer browsing purposes, and possibly other categories for other purposes).
>>
>> If you want more something different than this then some code changing will be necessary because of how permissions are currently
>> implemented in OFBiz.
>>
>> -David
>>
>>
>> On Feb 5, 2010, at 6:49 PM, Ruth Hoffman wrote:
>>
>>
>>> Hi DeedraF:
>>> I think this has been answer before on this list not too long ago.
>>>
>>> Out-of-the-box, you can't do this with any existing OFBiz applications. Basically, the best you can do is limit access to
>>> certain users (belonging to security groups) by store.
>>>
>>> To regulate access to specific products in a catalog on the same website (or "store"), you will need to write some code.
>>>
>>> Regards,
>>> Ruth
>>> ----------------------------------------------------
>>> Find me on the web at http://www.myofbiz.com or Google keyword "myofbiz"
>>> [hidden email]
>>>
>>> DeedraF wrote:
>>>
>>>> I am very new to OFBiz.  My dev team is working through the technical details
>>>> and I am trying to handle the more 'front end' setup activities.  Not
>>>> finding very many 'exact steps' or documentation to use as a guide, I
>>>> thought perhaps someone reading this post could help out??
>>>>
>>>> I have created a store, catalog, products...and would like to now assign
>>>> specific permissions accordingly.  I do not want all my ADMINs to have the
>>>> same full access to a catalog.  As a matter of fact, I would like to create
>>>> a 'Product Admin' allowing that person/group to simply Add, Edit, and Delete
>>>> products in a specific store catalog.  Is this a standard feature in OFBiz
>>>> that I am just not grasping how to accomplish?  If it is, please provide
>>>> steps that might help me accomplish this task.
>>>>
>>>> Thanks in advance for your help with this issue.
>>>>
>>
>>
>>
>

[Ruth Hoffman-2]

Hi Jacques:
Thanks for posting this link. I used that when trying to determine the
actual steps involved in getting the requested scenario to work. At a
high level, it is very informative. Beyond that, what is need is a step
by step guide. David, if you would be kind enough to provide details, I
would be more than happy to verify and document the process and then
post it to the Wiki.
Regards,
Ruth

Jacques Le Roux wrote:

> This page may be helpful to have a beginning of an idea (it gives some
> pointers) on how roles and permissions are used together in
> OFBiz to achieve what David is talking about
> http://cwiki.apache.org/confluence/display/OFBTECH/OFBiz+security
>
> HTH
>
> Jacques
>
> From: "David E Jones" <[hidden email]>
>> I think Deedra is talking about product administration and not about
>> access to products in the ecommerce store.
>>
>> There is actually some functionality to give more limited permissions
>> to certain users. Instead of giving a user the full create,
>> update and delete permissions for the catalog manager give them the
>> "role limited" permissions. Then (as a different user that has
>> permission to do so) associate them with a catalog in a certain role
>> (which I've forgotten off the top of my head, sorry) and then
>> they will be able to update products only in that category, and
>> categories under that category (note that any category can be
>> "under" more than one category at a time, so typically these
>> categories will be under one or more categories for permission
>> purposes, and one or more categories for customer browsing purposes,
>> and possibly other categories for other purposes).
>>
>> If you want more something different than this then some code
>> changing will be necessary because of how permissions are currently
>> implemented in OFBiz.
>>
>> -David
>>
>>
>> On Feb 5, 2010, at 6:49 PM, Ruth Hoffman wrote:
>>
>>> Hi DeedraF:
>>> I think this has been answer before on this list not too long ago.
>>>
>>> Out-of-the-box, you can't do this with any existing OFBiz
>>> applications. Basically, the best you can do is limit access to certain
>>> users (belonging to security groups) by store.
>>>
>>> To regulate access to specific products in a catalog on the same
>>> website (or "store"), you will need to write some code.
>>>
>>> Regards,
>>> Ruth
>>> ----------------------------------------------------
>>> Find me on the web at http://www.myofbiz.com or Google keyword
>>> "myofbiz"
>>> [hidden email]
>>>
>>> DeedraF wrote:
>>>> I am very new to OFBiz.  My dev team is working through the
>>>> technical details
>>>> and I am trying to handle the more 'front end' setup activities.  Not
>>>> finding very many 'exact steps' or documentation to use as a guide, I
>>>> thought perhaps someone reading this post could help out??
>>>>
>>>> I have created a store, catalog, products...and would like to now
>>>> assign
>>>> specific permissions accordingly.  I do not want all my ADMINs to
>>>> have the
>>>> same full access to a catalog.  As a matter of fact, I would like
>>>> to create
>>>> a 'Product Admin' allowing that person/group to simply Add, Edit,
>>>> and Delete
>>>> products in a specific store catalog.  Is this a standard feature
>>>> in OFBiz
>>>> that I am just not grasping how to accomplish?  If it is, please
>>>> provide
>>>> steps that might help me accomplish this task.
>>>>
>>>> Thanks in advance for your help with this issue.
>>>>
>>
>
>

[Jacques Le Roux-2-2]

Ruth,

This would be great, I think David is not the only person able to explain that more... We don't need to rely on David for every
detail... Let him breathe please :D

Jacques

From: "Ruth Hoffman" <[hidden email]>

> Hi Jacques:
> Thanks for posting this link. I used that when trying to determine the actual steps involved in getting the requested scenario to
> work. At a high level, it is very informative. Beyond that, what is need is a step by step guide. David, if you would be kind
> enough to provide details, I would be more than happy to verify and document the process and then post it to the Wiki.
> Regards,
> Ruth
>
> Jacques Le Roux wrote:
>> This page may be helpful to have a beginning of an idea (it gives some pointers) on how roles and permissions are used together
>> in
>> OFBiz to achieve what David is talking about
>> http://cwiki.apache.org/confluence/display/OFBTECH/OFBiz+security
>>
>> HTH
>>
>> Jacques
>>
>> From: "David E Jones" <[hidden email]>
>>> I think Deedra is talking about product administration and not about access to products in the ecommerce store.
>>>
>>> There is actually some functionality to give more limited permissions to certain users. Instead of giving a user the full
>>> create,
>>> update and delete permissions for the catalog manager give them the "role limited" permissions. Then (as a different user that
>>> has
>>> permission to do so) associate them with a catalog in a certain role (which I've forgotten off the top of my head, sorry) and
>>> then
>>> they will be able to update products only in that category, and categories under that category (note that any category can be
>>> "under" more than one category at a time, so typically these categories will be under one or more categories for permission
>>> purposes, and one or more categories for customer browsing purposes, and possibly other categories for other purposes).
>>>
>>> If you want more something different than this then some code changing will be necessary because of how permissions are
>>> currently
>>> implemented in OFBiz.
>>>
>>> -David
>>>
>>>
>>> On Feb 5, 2010, at 6:49 PM, Ruth Hoffman wrote:
>>>
>>>> Hi DeedraF:
>>>> I think this has been answer before on this list not too long ago.
>>>>
>>>> Out-of-the-box, you can't do this with any existing OFBiz applications. Basically, the best you can do is limit access to
>>>> certain
>>>> users (belonging to security groups) by store.
>>>>
>>>> To regulate access to specific products in a catalog on the same website (or "store"), you will need to write some code.
>>>>
>>>> Regards,
>>>> Ruth
>>>> ----------------------------------------------------
>>>> Find me on the web at http://www.myofbiz.com or Google keyword "myofbiz"
>>>> [hidden email]
>>>>
>>>> DeedraF wrote:
>>>>> I am very new to OFBiz.  My dev team is working through the technical details
>>>>> and I am trying to handle the more 'front end' setup activities.  Not
>>>>> finding very many 'exact steps' or documentation to use as a guide, I
>>>>> thought perhaps someone reading this post could help out??
>>>>>
>>>>> I have created a store, catalog, products...and would like to now assign
>>>>> specific permissions accordingly.  I do not want all my ADMINs to have the
>>>>> same full access to a catalog.  As a matter of fact, I would like to create
>>>>> a 'Product Admin' allowing that person/group to simply Add, Edit, and Delete
>>>>> products in a specific store catalog.  Is this a standard feature in OFBiz
>>>>> that I am just not grasping how to accomplish?  If it is, please provide
>>>>> steps that might help me accomplish this task.
>>>>>
>>>>> Thanks in advance for your help with this issue.
>>>>>
>>>
>>
>>
>

[Ruth Hoffman-2]

Hi Jacques:
Sure.  Can you or some one explain to me how to do this?
As I said before, I wasn't able to make it work given the tools
available at the time.
Regards,
Ruth

Jacques Le Roux wrote:

> Ruth,
>
> This would be great, I think David is not the only person able to
> explain that more... We don't need to rely on David for every
> detail... Let him breathe please :D
>
> Jacques
>
> From: "Ruth Hoffman" <[hidden email]>
>> Hi Jacques:
>> Thanks for posting this link. I used that when trying to determine
>> the actual steps involved in getting the requested scenario to
>> work. At a high level, it is very informative. Beyond that, what is
>> need is a step by step guide. David, if you would be kind
>> enough to provide details, I would be more than happy to verify and
>> document the process and then post it to the Wiki.
>> Regards,
>> Ruth
>>
>> Jacques Le Roux wrote:
>>> This page may be helpful to have a beginning of an idea (it gives
>>> some pointers) on how roles and permissions are used together
>>> in
>>> OFBiz to achieve what David is talking about
>>> http://cwiki.apache.org/confluence/display/OFBTECH/OFBiz+security
>>>
>>> HTH
>>>
>>> Jacques
>>>
>>> From: "David E Jones" <[hidden email]>
>>>> I think Deedra is talking about product administration and not
>>>> about access to products in the ecommerce store.
>>>>
>>>> There is actually some functionality to give more limited
>>>> permissions to certain users. Instead of giving a user the full
>>>> create,
>>>> update and delete permissions for the catalog manager give them the
>>>> "role limited" permissions. Then (as a different user that
>>>> has
>>>> permission to do so) associate them with a catalog in a certain
>>>> role (which I've forgotten off the top of my head, sorry) and
>>>> then
>>>> they will be able to update products only in that category, and
>>>> categories under that category (note that any category can be
>>>> "under" more than one category at a time, so typically these
>>>> categories will be under one or more categories for permission
>>>> purposes, and one or more categories for customer browsing
>>>> purposes, and possibly other categories for other purposes).
>>>>
>>>> If you want more something different than this then some code
>>>> changing will be necessary because of how permissions are
>>>> currently
>>>> implemented in OFBiz.
>>>>
>>>> -David
>>>>
>>>>
>>>> On Feb 5, 2010, at 6:49 PM, Ruth Hoffman wrote:
>>>>
>>>>> Hi DeedraF:
>>>>> I think this has been answer before on this list not too long ago.
>>>>>
>>>>> Out-of-the-box, you can't do this with any existing OFBiz
>>>>> applications. Basically, the best you can do is limit access to
>>>>> certain
>>>>> users (belonging to security groups) by store.
>>>>>
>>>>> To regulate access to specific products in a catalog on the same
>>>>> website (or "store"), you will need to write some code.
>>>>>
>>>>> Regards,
>>>>> Ruth
>>>>> ----------------------------------------------------
>>>>> Find me on the web at http://www.myofbiz.com or Google keyword
>>>>> "myofbiz"
>>>>> [hidden email]
>>>>>
>>>>> DeedraF wrote:
>>>>>> I am very new to OFBiz.  My dev team is working through the
>>>>>> technical details
>>>>>> and I am trying to handle the more 'front end' setup activities.  
>>>>>> Not
>>>>>> finding very many 'exact steps' or documentation to use as a
>>>>>> guide, I
>>>>>> thought perhaps someone reading this post could help out??
>>>>>>
>>>>>> I have created a store, catalog, products...and would like to now
>>>>>> assign
>>>>>> specific permissions accordingly.  I do not want all my ADMINs to
>>>>>> have the
>>>>>> same full access to a catalog.  As a matter of fact, I would like
>>>>>> to create
>>>>>> a 'Product Admin' allowing that person/group to simply Add, Edit,
>>>>>> and Delete
>>>>>> products in a specific store catalog.  Is this a standard feature
>>>>>> in OFBiz
>>>>>> that I am just not grasping how to accomplish?  If it is, please
>>>>>> provide
>>>>>> steps that might help me accomplish this task.
>>>>>>
>>>>>> Thanks in advance for your help with this issue.
>>>>>>
>>>>
>>>
>>>
>>
>
>

[Jacques Le Roux-2-2]

I will wait to see if the 1st to ask this question will get back to us with some results, or questions...

Jacques

From: "Ruth Hoffman" <[hidden email]>

> Hi Jacques:
> Sure.  Can you or some one explain to me how to do this?
> As I said before, I wasn't able to make it work given the tools
> available at the time.
> Regards,
> Ruth
>
> Jacques Le Roux wrote:
>> Ruth,
>>
>> This would be great, I think David is not the only person able to
>> explain that more... We don't need to rely on David for every
>> detail... Let him breathe please :D
>>
>> Jacques
>>
>> From: "Ruth Hoffman" <[hidden email]>
>>> Hi Jacques:
>>> Thanks for posting this link. I used that when trying to determine
>>> the actual steps involved in getting the requested scenario to
>>> work. At a high level, it is very informative. Beyond that, what is
>>> need is a step by step guide. David, if you would be kind
>>> enough to provide details, I would be more than happy to verify and
>>> document the process and then post it to the Wiki.
>>> Regards,
>>> Ruth
>>>
>>> Jacques Le Roux wrote:
>>>> This page may be helpful to have a beginning of an idea (it gives
>>>> some pointers) on how roles and permissions are used together
>>>> in
>>>> OFBiz to achieve what David is talking about
>>>> http://cwiki.apache.org/confluence/display/OFBTECH/OFBiz+security
>>>>
>>>> HTH
>>>>
>>>> Jacques
>>>>
>>>> From: "David E Jones" <[hidden email]>
>>>>> I think Deedra is talking about product administration and not
>>>>> about access to products in the ecommerce store.
>>>>>
>>>>> There is actually some functionality to give more limited
>>>>> permissions to certain users. Instead of giving a user the full
>>>>> create,
>>>>> update and delete permissions for the catalog manager give them the
>>>>> "role limited" permissions. Then (as a different user that
>>>>> has
>>>>> permission to do so) associate them with a catalog in a certain
>>>>> role (which I've forgotten off the top of my head, sorry) and
>>>>> then
>>>>> they will be able to update products only in that category, and
>>>>> categories under that category (note that any category can be
>>>>> "under" more than one category at a time, so typically these
>>>>> categories will be under one or more categories for permission
>>>>> purposes, and one or more categories for customer browsing
>>>>> purposes, and possibly other categories for other purposes).
>>>>>
>>>>> If you want more something different than this then some code
>>>>> changing will be necessary because of how permissions are
>>>>> currently
>>>>> implemented in OFBiz.
>>>>>
>>>>> -David
>>>>>
>>>>>
>>>>> On Feb 5, 2010, at 6:49 PM, Ruth Hoffman wrote:
>>>>>
>>>>>> Hi DeedraF:
>>>>>> I think this has been answer before on this list not too long ago.
>>>>>>
>>>>>> Out-of-the-box, you can't do this with any existing OFBiz
>>>>>> applications. Basically, the best you can do is limit access to
>>>>>> certain
>>>>>> users (belonging to security groups) by store.
>>>>>>
>>>>>> To regulate access to specific products in a catalog on the same
>>>>>> website (or "store"), you will need to write some code.
>>>>>>
>>>>>> Regards,
>>>>>> Ruth
>>>>>> ----------------------------------------------------
>>>>>> Find me on the web at http://www.myofbiz.com or Google keyword
>>>>>> "myofbiz"
>>>>>> [hidden email]
>>>>>>
>>>>>> DeedraF wrote:
>>>>>>> I am very new to OFBiz.  My dev team is working through the
>>>>>>> technical details
>>>>>>> and I am trying to handle the more 'front end' setup activities.  
>>>>>>> Not
>>>>>>> finding very many 'exact steps' or documentation to use as a
>>>>>>> guide, I
>>>>>>> thought perhaps someone reading this post could help out??
>>>>>>>
>>>>>>> I have created a store, catalog, products...and would like to now
>>>>>>> assign
>>>>>>> specific permissions accordingly.  I do not want all my ADMINs to
>>>>>>> have the
>>>>>>> same full access to a catalog.  As a matter of fact, I would like
>>>>>>> to create
>>>>>>> a 'Product Admin' allowing that person/group to simply Add, Edit,
>>>>>>> and Delete
>>>>>>> products in a specific store catalog.  Is this a standard feature
>>>>>>> in OFBiz
>>>>>>> that I am just not grasping how to accomplish?  If it is, please
>>>>>>> provide
>>>>>>> steps that might help me accomplish this task.
>>>>>>>
>>>>>>> Thanks in advance for your help with this issue.
>>>>>>>
>>>>>
>>>>
>>>>
>>>
>>
>>
>

[Patrick-4]

Hi Deedra,
The way I do it is I assign a user as a roleTypeId "VENDOR" to the
appropriate catalog.  Then when someone tries to Add, Edit, Delete, I
check to see if they are a vendor, this checking is done in
ProductServices.xml and CategoryServices.xml.   If basically a DB
query with <entity-and >  and then some checking <if> <condition> ...
Patrick

On Fri, Feb 5, 2010 at 1:31 PM, DeedraF <[hidden email]> wrote:

>
> I am very new to OFBiz.  My dev team is working through the technical details
> and I am trying to handle the more 'front end' setup activities.  Not
> finding very many 'exact steps' or documentation to use as a guide, I
> thought perhaps someone reading this post could help out??
>
> I have created a store, catalog, products...and would like to now assign
> specific permissions accordingly.  I do not want all my ADMINs to have the
> same full access to a catalog.  As a matter of fact, I would like to create
> a 'Product Admin' allowing that person/group to simply Add, Edit, and Delete
> products in a specific store catalog.  Is this a standard feature in OFBiz
> that I am just not grasping how to accomplish?  If it is, please provide
> steps that might help me accomplish this task.
>
> Thanks in advance for your help with this issue.
>
> --
> View this message in context: http://n4.nabble.com/Setting-product-admin-permissions-on-a-store-or-catalog-tp1470683p1470683.html
> Sent from the OFBiz - User mailing list archive at Nabble.com.
>

[Jacques Le Roux-2-2]

Hey cool, already an answer, does it help you Ruth?

Jacques

From: "Patrick" <[hidden email]>

> Hi Deedra,
> The way I do it is I assign a user as a roleTypeId "VENDOR" to the
> appropriate catalog.  Then when someone tries to Add, Edit, Delete, I
> check to see if they are a vendor, this checking is done in
> ProductServices.xml and CategoryServices.xml.   If basically a DB
> query with <entity-and >  and then some checking <if> <condition> ...
> Patrick
>
> On Fri, Feb 5, 2010 at 1:31 PM, DeedraF <[hidden email]> wrote:
>>
>> I am very new to OFBiz. My dev team is working through the technical details
>> and I am trying to handle the more 'front end' setup activities. Not
>> finding very many 'exact steps' or documentation to use as a guide, I
>> thought perhaps someone reading this post could help out??
>>
>> I have created a store, catalog, products...and would like to now assign
>> specific permissions accordingly. I do not want all my ADMINs to have the
>> same full access to a catalog. As a matter of fact, I would like to create
>> a 'Product Admin' allowing that person/group to simply Add, Edit, and Delete
>> products in a specific store catalog. Is this a standard feature in OFBiz
>> that I am just not grasping how to accomplish? If it is, please provide
>> steps that might help me accomplish this task.
>>
>> Thanks in advance for your help with this issue.
>>
>> --
>> View this message in context: http://n4.nabble.com/Setting-product-admin-permissions-on-a-store-or-catalog-tp1470683p1470683.html
>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>>
>

[Ruth Hoffman-2]

Hi Jacques:
Yes an answer that begets more questions: who is "I" ? Did Patrick need
to write/modify a service to do this? Is there a UI that facilitates
this? How are users assigned roles types? Lots of unanswered questions.

Ruth

Jacques Le Roux wrote:

> Hey cool, already an answer, does it help you Ruth?
>
> Jacques
>
> From: "Patrick" <[hidden email]>
>> Hi Deedra,
>> The way I do it is I assign a user as a roleTypeId "VENDOR" to the
>> appropriate catalog.  Then when someone tries to Add, Edit, Delete, I
>> check to see if they are a vendor, this checking is done in
>> ProductServices.xml and CategoryServices.xml.   If basically a DB
>> query with <entity-and >  and then some checking <if> <condition> ...
>> Patrick
>>
>> On Fri, Feb 5, 2010 at 1:31 PM, DeedraF <[hidden email]>
>> wrote:
>>>
>>> I am very new to OFBiz. My dev team is working through the technical
>>> details
>>> and I am trying to handle the more 'front end' setup activities. Not
>>> finding very many 'exact steps' or documentation to use as a guide, I
>>> thought perhaps someone reading this post could help out??
>>>
>>> I have created a store, catalog, products...and would like to now
>>> assign
>>> specific permissions accordingly. I do not want all my ADMINs to
>>> have the
>>> same full access to a catalog. As a matter of fact, I would like to
>>> create
>>> a 'Product Admin' allowing that person/group to simply Add, Edit,
>>> and Delete
>>> products in a specific store catalog. Is this a standard feature in
>>> OFBiz
>>> that I am just not grasping how to accomplish? If it is, please provide
>>> steps that might help me accomplish this task.
>>>
>>> Thanks in advance for your help with this issue.
>>>
>>> --
>>> View this message in context:
>>> http://n4.nabble.com/Setting-product-admin-permissions-on-a-store-or-catalog-tp1470683p1470683.html 
>>>
>>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>>>
>>
>
>

[Ruth Hoffman-2]

Also,
What release and version are we talking about?
TIA
Ruth

Ruth Hoffman wrote:

> Hi Jacques:
> Yes an answer that begets more questions: who is "I" ? Did Patrick
> need to write/modify a service to do this? Is there a UI that
> facilitates this? How are users assigned roles types? Lots of
> unanswered questions.
>
> Ruth
>
> Jacques Le Roux wrote:
>> Hey cool, already an answer, does it help you Ruth?
>>
>> Jacques
>>
>> From: "Patrick" <[hidden email]>
>>> Hi Deedra,
>>> The way I do it is I assign a user as a roleTypeId "VENDOR" to the
>>> appropriate catalog.  Then when someone tries to Add, Edit, Delete, I
>>> check to see if they are a vendor, this checking is done in
>>> ProductServices.xml and CategoryServices.xml.   If basically a DB
>>> query with <entity-and >  and then some checking <if> <condition> ...
>>> Patrick
>>>
>>> On Fri, Feb 5, 2010 at 1:31 PM, DeedraF
>>> <[hidden email]> wrote:
>>>>
>>>> I am very new to OFBiz. My dev team is working through the
>>>> technical details
>>>> and I am trying to handle the more 'front end' setup activities. Not
>>>> finding very many 'exact steps' or documentation to use as a guide, I
>>>> thought perhaps someone reading this post could help out??
>>>>
>>>> I have created a store, catalog, products...and would like to now
>>>> assign
>>>> specific permissions accordingly. I do not want all my ADMINs to
>>>> have the
>>>> same full access to a catalog. As a matter of fact, I would like to
>>>> create
>>>> a 'Product Admin' allowing that person/group to simply Add, Edit,
>>>> and Delete
>>>> products in a specific store catalog. Is this a standard feature in
>>>> OFBiz
>>>> that I am just not grasping how to accomplish? If it is, please
>>>> provide
>>>> steps that might help me accomplish this task.
>>>>
>>>> Thanks in advance for your help with this issue.
>>>>
>>>> --
>>>> View this message in context:
>>>> http://n4.nabble.com/Setting-product-admin-permissions-on-a-store-or-catalog-tp1470683p1470683.html 
>>>>
>>>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>>>>
>>>
>>
>>
>

[DeedraF]

Thanks David (and everyone else looking into this issue).  I am in fact attempting to limit at the administration side of things, not the eCommerce level.  Just to be clear, I have created a store XYZ with a catalog 123 and two categories shippable, non-shippable.  I have created a couple products under each categories within the catalog 123.  Now I would like is to setup a few ADMIN accounts with different access.  For example, 'Admin-all' should have all rights and all tabs accessible for store, catalog, categories, products....  while 'Admin-product' should have rights to perhaps add, delete, update products within existing categories of a catalog 123 in store XYZ.  We are trying to start small with our eCommerce as I am afraid many of the admin users will be overwhelmed by the vast possibilities within this tool.  Thus, I am hoping to limit their confusion a bit if at all possible :)

If I can accomplish this out of the box by creating a security group, I will be happy to do so.  Could someone simply provide steps for me to follow?

Thanks again for all your help!
Kind Regards,
Deedra

[Ruth Hoffman-2]

Hi Deedra:
Just a quick note about Security Groups:

OOTB they work to control access to website locations as defined by
URLs. So, when a login attempt occurs or when a user attempts to access
a URL for a given webapp,  OFBiz will check to see if the user has the
proper Security Group associations. If they do, they are allowed access
to that URL or web page.

Bottom-line: I don't think Security Groups is the answer to your
problem. IMO you will need to revisit the role associations as mentioned
in an earlier post.

Hope that helps (vs. making you more confused :-)

Regards,
Ruth
----------------------------------------------------
Find me on the web at http://www.myofbiz.com or Google keyword "myofbiz"
[hidden email]

DeedraF wrote:

> Thanks David (and everyone else looking into this issue).  I am in fact
> attempting to limit at the administration side of things, not the eCommerce
> level.  Just to be clear, I have created a store XYZ with a catalog 123 and
> two categories shippable, non-shippable.  I have created a couple products
> under each categories within the catalog 123.  Now I would like is to setup
> a few ADMIN accounts with different access.  For example, 'Admin-all' should
> have all rights and all tabs accessible for store, catalog, categories,
> products....  while 'Admin-product' should have rights to perhaps add,
> delete, update products within existing categories of a catalog 123 in store
> XYZ.  We are trying to start small with our eCommerce as I am afraid many of
> the admin users will be overwhelmed by the vast possibilities within this
> tool.  Thus, I am hoping to limit their confusion a bit if at all possible
> :)
>
> If I can accomplish this out of the box by creating a security group, I will
> be happy to do so.  Could someone simply provide steps for me to follow?
>
> Thanks again for all your help!
> Kind Regards,
> Deedra
>