Web User Permissions

[Alan-140]

Hi

I am having problems with updating ledgers when web users pay for goods.

I sure the problem is configuration but I don't know where. All help
greatly appreciated.

Also, I'm not clear on how new users are assigned the ACCTG_ATX
permissions.

Alan

The log message is
2009-05-17 19:51:17,700 (TP-Processor14) [
ServiceDispatcher.java:500:ERROR]
---- exception report
----------------------------------------------------------
Service [createAcctgTransAndEntries] threw an unexpected exception/error
Exception: org.ofbiz.service.ServiceAuthException
Message: Security Error: To run createAcctgTransAndEntries you must have
the one of the following permissions: ACCTG_ATX_CREATE, ACCTG_ATX_ADMIN
---- stack trace
---------------------------------------------------------------
org.ofbiz.service.ServiceAuthException: Security Error: To run
createAcctgTransAndEntries you must have the one of the following
permissions: ACCTG_ATX_CREATE, ACCTG_ATX_ADMIN
org.ofbiz.service.ServiceDispatcher.checkAuth(ServiceDispatcher.java:908)
org.ofbiz.service.ServiceDispatcher.runSync(ServiceDispatcher.java:342)
org.ofbiz.service.ServiceDispatcher.runSync(ServiceDispatcher.java:213)
org.ofbiz.service.GenericDispatcher.runSync(GenericDispatcher.java:163)
The system is failing in the following service:

<service name="acctgTransactionPermissionCheck" engine="simple"
            location="component://accounting/script/org/ofbiz/accounting/permissions/PermissionServices.xml" invoke="acctgTransactionPermissionCheck">
        <description>Basic General Ledger Permission Checking Logic</description>
        <implements service="permissionInterface"/>
    </service>

which in turn invokes

<!-- Returns hasPermission=true if user has one of the ACCTG_ATX CRUD+ADMIN permissions -->
    <simple-method method-name="acctgTransactionPermissionCheck" short-description="Accounting transaction permission logic">
        <set field="primaryPermission" value="ACCTG_ATX"/>
        <call-simple-method method-name="genericBasePermissionCheck" xml-resource="component://common/script/org/ofbiz/common/permission/CommonPermissionServices.xml"/>
    </simple-method>

[aswath narayana]

Look at the AccountSecurityData.xml and at the end of the file, there are
SecurityGroupPermissions.
Give FULLADMIN group rights for the user,  for ACCTG_ATX_ADMIN
Give FLEXADMIN group rights for the user, for ACCTG_ATX_CREATE

Steps to assign a SecurityGroup

   - Login with superuser privileges equivalent to admin/ofbiz.
   - Search for the party for which the permissions are need to be assigned
   - Goto the Party profile screen and look at the Username section on the
   rightside
   - Click on the SecurityGroups
   - In the 'Add UserLogin to the SecurityGroup' sreen, choose FULLADMIN


-Aswath


On Mon, May 18, 2009 at 2:20 AM, Alan <[hidden email]> wrote:

> Hi
>
> I am having problems with updating ledgers when web users pay for goods.
>
> I sure the problem is configuration but I don't know where. All help
> greatly appreciated.
>
> Also, I'm not clear on how new users are assigned the ACCTG_ATX
> permissions.
>
> Alan
>
> The log message is
> 2009-05-17 19:51:17,700 (TP-Processor14) [
> ServiceDispatcher.java:500:ERROR]
> ---- exception report
> ----------------------------------------------------------
> Service [createAcctgTransAndEntries] threw an unexpected exception/error
> Exception: org.ofbiz.service.ServiceAuthException
> Message: Security Error: To run createAcctgTransAndEntries you must have
> the one of the following permissions: ACCTG_ATX_CREATE, ACCTG_ATX_ADMIN
> ---- stack trace
> ---------------------------------------------------------------
> org.ofbiz.service.ServiceAuthException: Security Error: To run
> createAcctgTransAndEntries you must have the one of the following
> permissions: ACCTG_ATX_CREATE, ACCTG_ATX_ADMIN
> org.ofbiz.service.ServiceDispatcher.checkAuth(ServiceDispatcher.java:908)
> org.ofbiz.service.ServiceDispatcher.runSync(ServiceDispatcher.java:342)
> org.ofbiz.service.ServiceDispatcher.runSync(ServiceDispatcher.java:213)
> org.ofbiz.service.GenericDispatcher.runSync(GenericDispatcher.java:163)
> The system is failing in the following service:
>
> <service name="acctgTransactionPermissionCheck" engine="simple"
>
>  location="component://accounting/script/org/ofbiz/accounting/permissions/PermissionServices.xml"
> invoke="acctgTransactionPermissionCheck">
>        <description>Basic General Ledger Permission Checking
> Logic</description>
>        <implements service="permissionInterface"/>
>    </service>
>
> which in turn invokes
>
> <!-- Returns hasPermission=true if user has one of the ACCTG_ATX CRUD+ADMIN
> permissions -->
>    <simple-method method-name="acctgTransactionPermissionCheck"
> short-description="Accounting transaction permission logic">
>        <set field="primaryPermission" value="ACCTG_ATX"/>
>        <call-simple-method method-name="genericBasePermissionCheck"
> xml-resource="component://common/script/org/ofbiz/common/permission/CommonPermissionServices.xml"/>
>    </simple-method>
>
>