creating a new user login

[Wai]

Hello All,

from https://localhost:8443/partymgr/control/createnewlogin

Ofbiz permits me to create a new user login.  But does not allow me to place the new user login into a security group, does not allow me to associate it with an existing party/partygroup.  As a result, the new user cannot be used to access any components.

Am I missing some steps.

Thanks,
Wai

[BJ Freeman]

once created go to the user login portion of the party(group) and you
will see roles and security. click n security and you can add the
permissions.

Wai sent the following on 10/14/2011 11:33 AM:

> Hello All,
>
> from https://localhost:8443/partymgr/control/createnewlogin
>
> Ofbiz permits me to create a new user login.  But does not allow me to place
> the new user login into a security group, does not allow me to associate it
> with an existing party/partygroup.  As a result, the new user cannot be used
> to access any components.
>
> Am I missing some steps.
>
> Thanks,
> Wai
>
> --
> View this message in context: http://ofbiz.135035.n4.nabble.com/creating-a-new-user-login-tp3905814p3905814.html
> Sent from the OFBiz - User mailing list archive at Nabble.com.
>

[Wai]

That can't be done.

When a new username is created, it is not associated with a party.
Attempting to locate the user name using the party search page (https://localhost:8443/partymgr/control/main) does not yield the newly created username.

Since the party search cannot locate the username, and the username is not already associated with a party/partygroup, there is no way I can view the party profile page to work with the securitygroup and permission portion.

Any other suggestion would be appreciated or is this a bug?

Thanks,
Wai

[Wai]

On a second note.
Does it make sense to define a username to allow a person to access the ofbiz components without an associated party or partygroup info?  I could not think of any instance where such a situation would be useful.
Thanks

[BJ Freeman]

depends on how you creating the login.
programing it should follow creating and or selecting a partyID, then
use that partyID when you created the userlogin.
then use use the userlogingID to add the security portion.

from the webpages you select or create a party
then go into the party and in the Userlogin create a login.
this does all the association you need.
then select the Userlogin and add the roles and security.

Wai sent the following on 10/14/2011 6:15 PM:

> That can't be done.
>
> When a new username is created, it is not associated with a party.
> Attempting to locate the user name using the party search page
> (https://localhost:8443/partymgr/control/main) does not yield the newly
> created username.
>
> Since the party search cannot locate the username, and the username is not
> already associated with a party/partygroup, there is no way I can view the
> party profile page to work with the securitygroup and permission portion.
>
> Any other suggestion would be appreciated or is this a bug?
>
> Thanks,
> Wai
>
> --
> View this message in context: http://ofbiz.135035.n4.nabble.com/creating-a-new-user-login-tp3905814p3906688.html
> Sent from the OFBiz - User mailing list archive at Nabble.com.
>

[BJ Freeman]

with the userlogin part of a party or partygroup, it assumes the
attributes of that partyID

Wai sent the following on 10/14/2011 7:26 PM:

> On a second note.
> Does it make sense to define a username to allow a person to access the
> ofbiz components without an associated party or partygroup info?  I could
> not think of any instance where such a situation would be useful.
> Thanks
>
> --
> View this message in context: http://ofbiz.135035.n4.nabble.com/creating-a-new-user-login-tp3905814p3906739.html
> Sent from the OFBiz - User mailing list archive at Nabble.com.
>

[BJ Freeman]

you can also look at the ant script to create a userlogin for admin.
ant -p

BJ Freeman sent the following on 10/14/2011 11:25 PM:

> depends on how you creating the login.
> programing it should follow creating and or selecting a partyID, then
> use that partyID when you created the userlogin.
> then use use the userlogingID to add the security portion.
>
> from the webpages you select or create a party
> then go into the party and in the Userlogin create a login.
> this does all the association you need.
> then select the Userlogin and add the roles and security.
>
> Wai sent the following on 10/14/2011 6:15 PM:
>> That can't be done.
>>
>> When a new username is created, it is not associated with a party.
>> Attempting to locate the user name using the party search page
>> (https://localhost:8443/partymgr/control/main) does not yield the newly
>> created username.
>>
>> Since the party search cannot locate the username, and the username is not
>> already associated with a party/partygroup, there is no way I can view the
>> party profile page to work with the securitygroup and permission portion.
>>
>> Any other suggestion would be appreciated or is this a bug?
>>
>> Thanks,
>> Wai
>>
>> --
>> View this message in context: http://ofbiz.135035.n4.nabble.com/creating-a-new-user-login-tp3905814p3906688.html
>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>>
>

[Wai]

The procedure you mentioned in creating a username for an "existing" party/partygroup is what I have expected to be the proper procedure.

The original intent of this posting was that ofbiz allows me to create just a username "without" an associated party/partygroup.  After which, I cannot associate the username with a party/partygroup.  Hence, the username cannot be associated with a security group.  Hence, no access to ofbiz using this username.  In short, the newly created username is useless.

I think that this is a bug and the button to create just a new userlogin should be removed or the screen should be enhanced to specify an existing party/partygroup that the username is to be associated with.

The page I'm referring to is https://localhost:8443/partymgr/control/createnewlogin

Thanks

[BJ Freeman]

go to https://demo-trunk.ofbiz.apache.org/webtools/control/ArtifactInfo
type in createnewlogin then click find.
you will see there is no direct call from a webpage to the url.
it is part of other processes.
so could you expand on why you think this is a problem.
BTW I agree with what you said, just don't see it as a issue.


Wai sent the following on 10/15/2011 9:52 PM:

> The procedure you mentioned in creating a username for an "existing"
> party/partygroup is what I have expected to be the proper procedure.
>
> The original intent of this posting was that ofbiz allows me to create just
> a username "without" an associated party/partygroup.  After which, I cannot
> associate the username with a party/partygroup.  Hence, the username cannot
> be associated with a security group.  Hence, no access to ofbiz using this
> username.  In short, the newly created username is useless.
>
> I think that this is a bug and the button to create just a new userlogin
> should be removed or the screen should be enhanced to specify an existing
> party/partygroup that the username is to be associated with.
>
> The page I'm referring to is
> https://localhost:8443/partymgr/control/createnewlogin
>
> Thanks
>
> --
> View this message in context: http://ofbiz.135035.n4.nabble.com/creating-a-new-user-login-tp3905814p3908846.html
> Sent from the OFBiz - User mailing list archive at Nabble.com.
>

[Wai]

Here is a link to a page that allows you to create a new username without an associated party/partygroup.

   https://demo-trunk.ofbiz.apache.org/partymgr/control/FindUserLogin

Take note of the "create new" button.  This button will result in a request to https://demo-trunk.ofbiz.apache.org/partymgr/control/createnewlogin , that allows you to create a new username without an associated party/partygroup

My proposal is to correct the https://demo-trunk.ofbiz.apache.org/partymgr/control/createnewlogin page to contain functionality to select an existing party (or create a new party) and then associate the newly created username to it.

The request map for "createnewlogin" is located in component://common/webcommon/WEB-INF/security-controller.xml. This can be found from the tool you specified previously, https://demo-trunk.ofbiz.apache.org/webtools/control/ArtifactInfo

Clearly, this conflicts with your previous statement, "...you will see there is no direct call from a webpage to the url.  it is part of other processes. ...".  Unless we're referring to different areas.

Thanks

[BJ Freeman]

we are both right, for what that is worth.
to focus on your question, it looks like this was developed for external
logins with lack of understanding or not completed.
The solution is to put in a drop down box to select a partyID and make
sure that is required

Wai sent the following on 10/16/2011 11:21 AM:

> Here is a link to a page that allows you to create a new username without an
> associated party/partygroup.
>
>    https://demo-trunk.ofbiz.apache.org/partymgr/control/FindUserLogin
>
> Take note of the "create new" button.  This button will result in a request
> to https://demo-trunk.ofbiz.apache.org/partymgr/control/createnewlogin ,
> that allows you to create a new username without an associated
> party/partygroup
>
> My proposal is to correct the
> https://demo-trunk.ofbiz.apache.org/partymgr/control/createnewlogin page to
> contain functionality to select an existing party (or create a new party)
> and then associate the newly created username to it.
>
> The request map for "createnewlogin" is located in
> component://common/webcommon/WEB-INF/security-controller.xml. This can be
> found from the tool you specified previously,
> https://demo-trunk.ofbiz.apache.org/webtools/control/ArtifactInfo
>
> Clearly, this conflicts with your previous statement, "...you will see there
> is no direct call from a webpage to the url.  it is part of other processes.
> ...".  Unless we're referring to different areas.
>
> Thanks
>
>
> --
> View this message in context: http://ofbiz.135035.n4.nabble.com/creating-a-new-user-login-tp3905814p3910064.html
> Sent from the OFBiz - User mailing list archive at Nabble.com.
>