customer or public facing

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
13 messages Options
Reply | Threaded
Open this post in threaded view
|

customer or public facing

Zhiyong Cui
In Apache OFBiz Business Setup Guide, It is said  that OFBiz provides a number of Manager applications, which make up the "back office" functions of the suite. These applications are not intended to be customer or public facing, but rather tools to be used to administer and manage the OFBiz software. Is it means that Ofbiz only provides manager applications ,or does it provide some public facing too ?
Reply | Threaded
Open this post in threaded view
|

Re: customer or public facing

Sumit Pandit-3
You can see public facing ecommerce application in OFBiz - http://demo.ofbiz.org/ecommerce/control/main

Regards
Sumit Pandit

On 26-Aug-09, at 11:30 AM, Zhiyong Cui wrote:

>
> In Apache OFBiz Business Setup Guide, It is said  that OFBiz  
> provides a
> number of Manager applications, which make up the "back office"  
> functions of
> the suite. These applications are not intended to be customer or  
> public
> facing, but rather tools to be used to administer and manage the OFBiz
> software. Is it means that Ofbiz only provides manager  
> applications ,or does
> it provide some public facing too ?
> --
> View this message in context: http://www.nabble.com/customer-or-public-facing-tp25147050p25147050.html
> Sent from the OFBiz - User mailing list archive at Nabble.com.
>

Reply | Threaded
Open this post in threaded view
|

Re: customer or public facing

c.schinzer
I am not sure whether I get the question right. However, I'll try with the
following:

The OFBiz instance will expose all webapplications that are published to the
public IP address used. However, the manager applications by default will
require a password in order to access them (so you may consider those
applications an "extranet" functionality).

Beware that still EVERYONE can access the login pages for the manager
applications. That is the reason for the recommendation to change the
passwords for all admin users if you do not start blank but rather from the
Demo setup.

Also, if you do not protect them explicitly, the webapps like e.g. cmssite,
ecommerce, ecomclone etc will be freely accessible.
So rather play around on a local install (or the demo site that Sumit
indicated) before you start up your instance on the public IP address and
accidentially disclose all your confidential information to the world.

Kind regards


Carsten

2009/8/26 Sumit Pandit <[hidden email]>

> You can see public facing ecommerce application in OFBiz -
> http://demo.ofbiz.org/ecommerce/control/main
>
> Regards
> Sumit Pandit
>
>
> On 26-Aug-09, at 11:30 AM, Zhiyong Cui wrote:
>
>
>> In Apache OFBiz Business Setup Guide, It is said  that OFBiz provides a
>> number of Manager applications, which make up the "back office" functions
>> of
>> the suite. These applications are not intended to be customer or public
>> facing, but rather tools to be used to administer and manage the OFBiz
>> software. Is it means that Ofbiz only provides manager applications ,or
>> does
>> it provide some public facing too ?
>> --
>> View this message in context:
>> http://www.nabble.com/customer-or-public-facing-tp25147050p25147050.html
>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>>
>>
>


--

Best

Carsten Schinzer

Waisenhausstr. 53a
80637 München
Germany
Reply | Threaded
Open this post in threaded view
|

Re: customer or public facing

Zhiyong Cui
Thanks for all replies above.
What I want to know are below.
if I am a employee of Company  , what I should responsible for is one step of the  manufacturing example for a task , so I should be able to know the tasks belong to me but I should  not see any tasks belong to others . because I am a employee , I should be able to see all general information of others through the HR application  . but I should not update it . Does Ofbiz provide this sort of things ?
Carsten Schinzer wrote
I am not sure whether I get the question right. However, I'll try with the
following:

The OFBiz instance will expose all webapplications that are published to the
public IP address used. However, the manager applications by default will
require a password in order to access them (so you may consider those
applications an "extranet" functionality).

Beware that still EVERYONE can access the login pages for the manager
applications. That is the reason for the recommendation to change the
passwords for all admin users if you do not start blank but rather from the
Demo setup.

Also, if you do not protect them explicitly, the webapps like e.g. cmssite,
ecommerce, ecomclone etc will be freely accessible.
So rather play around on a local install (or the demo site that Sumit
indicated) before you start up your instance on the public IP address and
accidentially disclose all your confidential information to the world.

Kind regards


Carsten

2009/8/26 Sumit Pandit <sumit.pandit@hotwaxmedia.com>

> You can see public facing ecommerce application in OFBiz -
> http://demo.ofbiz.org/ecommerce/control/main
>
> Regards
> Sumit Pandit
>
>
> On 26-Aug-09, at 11:30 AM, Zhiyong Cui wrote:
>
>
>> In Apache OFBiz Business Setup Guide, It is said  that OFBiz provides a
>> number of Manager applications, which make up the "back office" functions
>> of
>> the suite. These applications are not intended to be customer or public
>> facing, but rather tools to be used to administer and manage the OFBiz
>> software. Is it means that Ofbiz only provides manager applications ,or
>> does
>> it provide some public facing too ?
>> --
>> View this message in context:
>> http://www.nabble.com/customer-or-public-facing-tp25147050p25147050.html
>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>>
>>
>


--

Best

Carsten Schinzer

Waisenhausstr. 53a
80637 München
Germany
Reply | Threaded
Open this post in threaded view
|

Re: customer or public facing

Sumit Pandit-3
Yes, OFBiz do supports it, there are various permissions  that can be  
set at for different purpose(eg - Create/Update/View). You can  
restrict your code by setting these permission.

--
Thanks And Regards
Sumit Pandit
On 26-Aug-09, at 1:29 PM, Zhiyong Cui wrote:

>
> Thanks for all replies above.
> What I want to know are below.
> if I am a employee of Company  , what I should responsible for is  
> one step
> of the  manufacturing example for a task , so I should be able to  
> know the
> tasks belong to me but I should  not see any tasks belong to others .
> because I am a employee , I should be able to see all general  
> information of
> others through the HR application  . but I should not update it .  
> Does Ofbiz
> provide this sort of things ?
>
> Carsten Schinzer wrote:
>>
>> I am not sure whether I get the question right. However, I'll try  
>> with the
>> following:
>>
>> The OFBiz instance will expose all webapplications that are  
>> published to
>> the
>> public IP address used. However, the manager applications by  
>> default will
>> require a password in order to access them (so you may consider those
>> applications an "extranet" functionality).
>>
>> Beware that still EVERYONE can access the login pages for the manager
>> applications. That is the reason for the recommendation to change the
>> passwords for all admin users if you do not start blank but rather  
>> from
>> the
>> Demo setup.
>>
>> Also, if you do not protect them explicitly, the webapps like e.g.
>> cmssite,
>> ecommerce, ecomclone etc will be freely accessible.
>> So rather play around on a local install (or the demo site that Sumit
>> indicated) before you start up your instance on the public IP  
>> address and
>> accidentially disclose all your confidential information to the  
>> world.
>>
>> Kind regards
>>
>>
>> Carsten
>>
>> 2009/8/26 Sumit Pandit <[hidden email]>
>>
>>> You can see public facing ecommerce application in OFBiz -
>>> http://demo.ofbiz.org/ecommerce/control/main
>>>
>>> Regards
>>> Sumit Pandit
>>>
>>>
>>> On 26-Aug-09, at 11:30 AM, Zhiyong Cui wrote:
>>>
>>>
>>>> In Apache OFBiz Business Setup Guide, It is said  that OFBiz  
>>>> provides a
>>>> number of Manager applications, which make up the "back office"
>>>> functions
>>>> of
>>>> the suite. These applications are not intended to be customer or  
>>>> public
>>>> facing, but rather tools to be used to administer and manage the  
>>>> OFBiz
>>>> software. Is it means that Ofbiz only provides manager  
>>>> applications ,or
>>>> does
>>>> it provide some public facing too ?
>>>> --
>>>> View this message in context:
>>>> http://www.nabble.com/customer-or-public-facing-tp25147050p25147050.html
>>>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>>>>
>>>>
>>>
>>
>>
>> --
>>
>> Best
>>
>> Carsten Schinzer
>>
>> Waisenhausstr. 53a
>> 80637 München
>> Germany
>>
>>
>
> --
> View this message in context: http://www.nabble.com/customer-or-public-facing-tp25147050p25148309.html
> Sent from the OFBiz - User mailing list archive at Nabble.com.
>

Reply | Threaded
Open this post in threaded view
|

Re: customer or public facing

Prateek Jain-6
In reply to this post by Zhiyong Cui
Hi

Yes ofbiz provide this facility. You can achive this by assigning
different roles.
for example the person of finannce department can not able to see update
or modify
data and applications related to HR or Party smiler to that there are
many different roles with different
permission in partymgr from where you can set all this kind of things
for different users

Regards
Prateek jain



Zhiyong Cui wrote:

> Thanks for all replies above.
> What I want to know are below.
> if I am a employee of Company  , what I should responsible for is one step
> of the  manufacturing example for a task , so I should be able to know the
> tasks belong to me but I should  not see any tasks belong to others .
> because I am a employee , I should be able to see all general information of
> others through the HR application  . but I should not update it . Does Ofbiz
> provide this sort of things ?
>
> Carsten Schinzer wrote:
>  
>> I am not sure whether I get the question right. However, I'll try with the
>> following:
>>
>> The OFBiz instance will expose all webapplications that are published to
>> the
>> public IP address used. However, the manager applications by default will
>> require a password in order to access them (so you may consider those
>> applications an "extranet" functionality).
>>
>> Beware that still EVERYONE can access the login pages for the manager
>> applications. That is the reason for the recommendation to change the
>> passwords for all admin users if you do not start blank but rather from
>> the
>> Demo setup.
>>
>> Also, if you do not protect them explicitly, the webapps like e.g.
>> cmssite,
>> ecommerce, ecomclone etc will be freely accessible.
>> So rather play around on a local install (or the demo site that Sumit
>> indicated) before you start up your instance on the public IP address and
>> accidentially disclose all your confidential information to the world.
>>
>> Kind regards
>>
>>
>> Carsten
>>
>> 2009/8/26 Sumit Pandit <[hidden email]>
>>
>>    
>>> You can see public facing ecommerce application in OFBiz -
>>> http://demo.ofbiz.org/ecommerce/control/main
>>>
>>> Regards
>>> Sumit Pandit
>>>
>>>
>>> On 26-Aug-09, at 11:30 AM, Zhiyong Cui wrote:
>>>
>>>
>>>      
>>>> In Apache OFBiz Business Setup Guide, It is said  that OFBiz provides a
>>>> number of Manager applications, which make up the "back office"
>>>> functions
>>>> of
>>>> the suite. These applications are not intended to be customer or public
>>>> facing, but rather tools to be used to administer and manage the OFBiz
>>>> software. Is it means that Ofbiz only provides manager applications ,or
>>>> does
>>>> it provide some public facing too ?
>>>> --
>>>> View this message in context:
>>>> http://www.nabble.com/customer-or-public-facing-tp25147050p25147050.html
>>>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>>>>
>>>>
>>>>        
>> --
>>
>> Best
>>
>> Carsten Schinzer
>>
>> Waisenhausstr. 53a
>> 80637 München
>> Germany
>>
>>
>>    
>
>  

Reply | Threaded
Open this post in threaded view
|

Re: customer or public facing

Ashish Vijaywargiya-5
In reply to this post by Zhiyong Cui
Refer MyPortal section in OFBiz - This will help you to see the task that is being assigned to you.

If you want to see the general information of other through HR application in read mode then it is possible in OFBiz.
Try to do login by demoadmin/ofbiz user.
For setting the permissions and related stuff please refer Party --> Security tab - then see how the things are organized by viewing the internal details present inside each security group.

--
Ashish

Zhiyong Cui wrote:
Thanks for all replies above.
What I want to know are below.
if I am a employee of Company  , what I should responsible for is one step
of the  manufacturing example for a task , so I should be able to know the
tasks belong to me but I should  not see any tasks belong to others .
because I am a employee , I should be able to see all general information of
others through the HR application  . but I should not update it . Does Ofbiz
provide this sort of things ?

Carsten Schinzer wrote:
  
I am not sure whether I get the question right. However, I'll try with the
following:

The OFBiz instance will expose all webapplications that are published to
the
public IP address used. However, the manager applications by default will
require a password in order to access them (so you may consider those
applications an "extranet" functionality).

Beware that still EVERYONE can access the login pages for the manager
applications. That is the reason for the recommendation to change the
passwords for all admin users if you do not start blank but rather from
the
Demo setup.

Also, if you do not protect them explicitly, the webapps like e.g.
cmssite,
ecommerce, ecomclone etc will be freely accessible.
So rather play around on a local install (or the demo site that Sumit
indicated) before you start up your instance on the public IP address and
accidentially disclose all your confidential information to the world.

Kind regards


Carsten

2009/8/26 Sumit Pandit [hidden email]

    
You can see public facing ecommerce application in OFBiz -
http://demo.ofbiz.org/ecommerce/control/main

Regards
Sumit Pandit


On 26-Aug-09, at 11:30 AM, Zhiyong Cui wrote:


      
In Apache OFBiz Business Setup Guide, It is said  that OFBiz provides a
number of Manager applications, which make up the "back office"
functions
of
the suite. These applications are not intended to be customer or public
facing, but rather tools to be used to administer and manage the OFBiz
software. Is it means that Ofbiz only provides manager applications ,or
does
it provide some public facing too ?
--
View this message in context:
http://www.nabble.com/customer-or-public-facing-tp25147050p25147050.html
Sent from the OFBiz - User mailing list archive at Nabble.com.


        
-- 

Best

Carsten Schinzer

Waisenhausstr. 53a
80637 München
Germany


    

  

smime.p7s (4K) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: customer or public facing

Jacques Le Roux-2-2
In reply to this post by Zhiyong Cui
Look for "security" in wiki, 1st entry of results is http://docs.ofbiz.org/display/OFBTECH/OFBiz+security
Wiki is your friend...
BTW we should better name this page Authorisations in OFBiz, I think I will change it's title (hence its URL).

Jacques


From: "Zhiyong Cui" <[hidden email]>

>
> Thanks for all replies above.
> What I want to know are below.
> if I am a employee of Company  , what I should responsible for is one step
> of the  manufacturing example for a task , so I should be able to know the
> tasks belong to me but I should  not see any tasks belong to others .
> because I am a employee , I should be able to see all general information of
> others through the HR application  . but I should not update it . Does Ofbiz
> provide this sort of things ?
>
> Carsten Schinzer wrote:
>>
>> I am not sure whether I get the question right. However, I'll try with the
>> following:
>>
>> The OFBiz instance will expose all webapplications that are published to
>> the
>> public IP address used. However, the manager applications by default will
>> require a password in order to access them (so you may consider those
>> applications an "extranet" functionality).
>>
>> Beware that still EVERYONE can access the login pages for the manager
>> applications. That is the reason for the recommendation to change the
>> passwords for all admin users if you do not start blank but rather from
>> the
>> Demo setup.
>>
>> Also, if you do not protect them explicitly, the webapps like e.g.
>> cmssite,
>> ecommerce, ecomclone etc will be freely accessible.
>> So rather play around on a local install (or the demo site that Sumit
>> indicated) before you start up your instance on the public IP address and
>> accidentially disclose all your confidential information to the world.
>>
>> Kind regards
>>
>>
>> Carsten
>>
>> 2009/8/26 Sumit Pandit <[hidden email]>
>>
>>> You can see public facing ecommerce application in OFBiz -
>>> http://demo.ofbiz.org/ecommerce/control/main
>>>
>>> Regards
>>> Sumit Pandit
>>>
>>>
>>> On 26-Aug-09, at 11:30 AM, Zhiyong Cui wrote:
>>>
>>>
>>>> In Apache OFBiz Business Setup Guide, It is said  that OFBiz provides a
>>>> number of Manager applications, which make up the "back office"
>>>> functions
>>>> of
>>>> the suite. These applications are not intended to be customer or public
>>>> facing, but rather tools to be used to administer and manage the OFBiz
>>>> software. Is it means that Ofbiz only provides manager applications ,or
>>>> does
>>>> it provide some public facing too ?
>>>> --
>>>> View this message in context:
>>>> http://www.nabble.com/customer-or-public-facing-tp25147050p25147050.html
>>>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>>>>
>>>>
>>>
>>
>>
>> --
>>
>> Best
>>
>> Carsten Schinzer
>>
>> Waisenhausstr. 53a
>> 80637 München
>> Germany
>>
>>
>
> --
> View this message in context: http://www.nabble.com/customer-or-public-facing-tp25147050p25148309.html
> Sent from the OFBiz - User mailing list archive at Nabble.com.
>
>

Reply | Threaded
Open this post in threaded view
|

Re: customer or public facing

Zhiyong Cui
In reply to this post by Ashish Vijaywargiya-5
If I need to integrate all these or other functionality ,and get it more specialist and detail。example for , I need some roles CEO、CTO 、 Warehouse manager and so on. and each role have different permissions。Then I must do it myself or ofbiz also supports it ? If I must do it , could someone give me some advice ? or I could follow the Myportal app? Thanks.
Ashish Vijaywargiya-5 wrote
Refer MyPortal section in OFBiz - This will help you to see the task
that is being assigned to you.

If you want to see the general information of other through HR
application in read mode then it is possible in OFBiz.
Try to do login by demoadmin/ofbiz user.
For setting the permissions and related stuff please refer Party -->
Security tab - then see how the things are organized by viewing the
internal details present inside each security group.

--
Ashish

Zhiyong Cui wrote:
> Thanks for all replies above.
> What I want to know are below.
> if I am a employee of Company  , what I should responsible for is one step
> of the  manufacturing example for a task , so I should be able to know the
> tasks belong to me but I should  not see any tasks belong to others .
> because I am a employee , I should be able to see all general information of
> others through the HR application  . but I should not update it . Does Ofbiz
> provide this sort of things ?
>
> Carsten Schinzer wrote:
>  
>> I am not sure whether I get the question right. However, I'll try with the
>> following:
>>
>> The OFBiz instance will expose all webapplications that are published to
>> the
>> public IP address used. However, the manager applications by default will
>> require a password in order to access them (so you may consider those
>> applications an "extranet" functionality).
>>
>> Beware that still EVERYONE can access the login pages for the manager
>> applications. That is the reason for the recommendation to change the
>> passwords for all admin users if you do not start blank but rather from
>> the
>> Demo setup.
>>
>> Also, if you do not protect them explicitly, the webapps like e.g.
>> cmssite,
>> ecommerce, ecomclone etc will be freely accessible.
>> So rather play around on a local install (or the demo site that Sumit
>> indicated) before you start up your instance on the public IP address and
>> accidentially disclose all your confidential information to the world.
>>
>> Kind regards
>>
>>
>> Carsten
>>
>> 2009/8/26 Sumit Pandit <sumit.pandit@hotwaxmedia.com>
>>
>>    
>>> You can see public facing ecommerce application in OFBiz -
>>> http://demo.ofbiz.org/ecommerce/control/main
>>>
>>> Regards
>>> Sumit Pandit
>>>
>>>
>>> On 26-Aug-09, at 11:30 AM, Zhiyong Cui wrote:
>>>
>>>
>>>      
>>>> In Apache OFBiz Business Setup Guide, It is said  that OFBiz provides a
>>>> number of Manager applications, which make up the "back office"
>>>> functions
>>>> of
>>>> the suite. These applications are not intended to be customer or public
>>>> facing, but rather tools to be used to administer and manage the OFBiz
>>>> software. Is it means that Ofbiz only provides manager applications ,or
>>>> does
>>>> it provide some public facing too ?
>>>> --
>>>> View this message in context:
>>>> http://www.nabble.com/customer-or-public-facing-tp25147050p25147050.html
>>>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>>>>
>>>>
>>>>        
>> --
>>
>> Best
>>
>> Carsten Schinzer
>>
>> Waisenhausstr. 53a
>> 80637 München
>> Germany
>>
>>
>>    
>
>  

 
Reply | Threaded
Open this post in threaded view
|

Re: customer or public facing

c.schinzer
Hi,

I've done a deep analysis of the ROLEs that come with OFBiz seed-initial,
seed and demo data feeds.
It is in Excel, so I cannot attach it here. If you want a copy, please
contact me directly.

The work is based upon low-level research on any *SecurityData.xml file in
OFBIZ_HOME.

Reading those and understanding the concept of
* how SecurityGroups are defined
* how Users are assigned to SecurityGroups
* how permissions are granted for certain Applications
will help you do your own. Also, play around with the demo data.

Kind regards


Carsten

2009/8/27 Zhiyong Cui <[hidden email]>

>
> If I need to integrate all these or other functionality ,and get it more
> specialist and detail。example for , I need some roles CEO、CTO 、 Warehouse
> manager and so on. and each role have different permissions。Then I must do
> it myself or ofbiz also supports it ? If I must do it , could someone give
> me some advice ? or I could follow the Myportal app? Thanks.
>
> Ashish Vijaywargiya-5 wrote:
> >
> > Refer MyPortal section in OFBiz - This will help you to see the task
> > that is being assigned to you.
> >
> > If you want to see the general information of other through HR
> > application in read mode then it is possible in OFBiz.
> > Try to do login by demoadmin/ofbiz user.
> > For setting the permissions and related stuff please refer Party -->
> > Security tab - then see how the things are organized by viewing the
> > internal details present inside each security group.
> >
> > --
> > Ashish
> >
> > Zhiyong Cui wrote:
> >> Thanks for all replies above.
> >> What I want to know are below.
> >> if I am a employee of Company  , what I should responsible for is one
> >> step
> >> of the  manufacturing example for a task , so I should be able to know
> >> the
> >> tasks belong to me but I should  not see any tasks belong to others .
> >> because I am a employee , I should be able to see all general
> information
> >> of
> >> others through the HR application  . but I should not update it . Does
> >> Ofbiz
> >> provide this sort of things ?
> >>
> >> Carsten Schinzer wrote:
> >>
> >>> I am not sure whether I get the question right. However, I'll try with
> >>> the
> >>> following:
> >>>
> >>> The OFBiz instance will expose all webapplications that are published
> to
> >>> the
> >>> public IP address used. However, the manager applications by default
> >>> will
> >>> require a password in order to access them (so you may consider those
> >>> applications an "extranet" functionality).
> >>>
> >>> Beware that still EVERYONE can access the login pages for the manager
> >>> applications. That is the reason for the recommendation to change the
> >>> passwords for all admin users if you do not start blank but rather from
> >>> the
> >>> Demo setup.
> >>>
> >>> Also, if you do not protect them explicitly, the webapps like e.g.
> >>> cmssite,
> >>> ecommerce, ecomclone etc will be freely accessible.
> >>> So rather play around on a local install (or the demo site that Sumit
> >>> indicated) before you start up your instance on the public IP address
> >>> and
> >>> accidentially disclose all your confidential information to the world.
> >>>
> >>> Kind regards
> >>>
> >>>
> >>> Carsten
> >>>
> >>> 2009/8/26 Sumit Pandit <[hidden email]>
> >>>
> >>>
> >>>> You can see public facing ecommerce application in OFBiz -
> >>>> http://demo.ofbiz.org/ecommerce/control/main
> >>>>
> >>>> Regards
> >>>> Sumit Pandit
> >>>>
> >>>>
> >>>> On 26-Aug-09, at 11:30 AM, Zhiyong Cui wrote:
> >>>>
> >>>>
> >>>>
> >>>>> In Apache OFBiz Business Setup Guide, It is said  that OFBiz provides
> >>>>> a
> >>>>> number of Manager applications, which make up the "back office"
> >>>>> functions
> >>>>> of
> >>>>> the suite. These applications are not intended to be customer or
> >>>>> public
> >>>>> facing, but rather tools to be used to administer and manage the
> OFBiz
> >>>>> software. Is it means that Ofbiz only provides manager applications
> >>>>> ,or
> >>>>> does
> >>>>> it provide some public facing too ?
> >>>>> --
> >>>>> View this message in context:
> >>>>>
> http://www.nabble.com/customer-or-public-facing-tp25147050p25147050.html
> >>>>> Sent from the OFBiz - User mailing list archive at Nabble.com.
> >>>>>
> >>>>>
> >>>>>
> >>> --
> >>>
> >>> Best
> >>>
> >>> Carsten Schinzer
> >>>
> >>> Waisenhausstr. 53a
> >>> 80637 München
> >>> Germany
> >>>
> >>>
> >>>
> >>
> >>
> >
> >
> >
>
> --
> View this message in context:
> http://www.nabble.com/customer-or-public-facing-tp25147050p25166914.html
> Sent from the OFBiz - User mailing list archive at Nabble.com.
>
>


--

Best

Carsten Schinzer

Waisenhausstr. 53a
80637 München
Germany
Reply | Threaded
Open this post in threaded view
|

Re: customer or public facing

Zhiyong Cui
Hi, Carsten, please send me a copy to zhiyongcui@gmail.com , Thank you very much !
Carsten Schinzer wrote
Hi,

I've done a deep analysis of the ROLEs that come with OFBiz seed-initial,
seed and demo data feeds.
It is in Excel, so I cannot attach it here. If you want a copy, please
contact me directly.

The work is based upon low-level research on any *SecurityData.xml file in
OFBIZ_HOME.

Reading those and understanding the concept of
* how SecurityGroups are defined
* how Users are assigned to SecurityGroups
* how permissions are granted for certain Applications
will help you do your own. Also, play around with the demo data.

Kind regards


Carsten

2009/8/27 Zhiyong Cui <zhiyongcui@gmail.com>

>
> If I need to integrate all these or other functionality ,and get it more
> specialist and detail。example for , I need some roles CEO、CTO 、 Warehouse
> manager and so on. and each role have different permissions。Then I must do
> it myself or ofbiz also supports it ? If I must do it , could someone give
> me some advice ? or I could follow the Myportal app? Thanks.
>
> Ashish Vijaywargiya-5 wrote:
> >
> > Refer MyPortal section in OFBiz - This will help you to see the task
> > that is being assigned to you.
> >
> > If you want to see the general information of other through HR
> > application in read mode then it is possible in OFBiz.
> > Try to do login by demoadmin/ofbiz user.
> > For setting the permissions and related stuff please refer Party -->
> > Security tab - then see how the things are organized by viewing the
> > internal details present inside each security group.
> >
> > --
> > Ashish
> >
> > Zhiyong Cui wrote:
> >> Thanks for all replies above.
> >> What I want to know are below.
> >> if I am a employee of Company  , what I should responsible for is one
> >> step
> >> of the  manufacturing example for a task , so I should be able to know
> >> the
> >> tasks belong to me but I should  not see any tasks belong to others .
> >> because I am a employee , I should be able to see all general
> information
> >> of
> >> others through the HR application  . but I should not update it . Does
> >> Ofbiz
> >> provide this sort of things ?
> >>
> >> Carsten Schinzer wrote:
> >>
> >>> I am not sure whether I get the question right. However, I'll try with
> >>> the
> >>> following:
> >>>
> >>> The OFBiz instance will expose all webapplications that are published
> to
> >>> the
> >>> public IP address used. However, the manager applications by default
> >>> will
> >>> require a password in order to access them (so you may consider those
> >>> applications an "extranet" functionality).
> >>>
> >>> Beware that still EVERYONE can access the login pages for the manager
> >>> applications. That is the reason for the recommendation to change the
> >>> passwords for all admin users if you do not start blank but rather from
> >>> the
> >>> Demo setup.
> >>>
> >>> Also, if you do not protect them explicitly, the webapps like e.g.
> >>> cmssite,
> >>> ecommerce, ecomclone etc will be freely accessible.
> >>> So rather play around on a local install (or the demo site that Sumit
> >>> indicated) before you start up your instance on the public IP address
> >>> and
> >>> accidentially disclose all your confidential information to the world.
> >>>
> >>> Kind regards
> >>>
> >>>
> >>> Carsten
> >>>
> >>> 2009/8/26 Sumit Pandit <sumit.pandit@hotwaxmedia.com>
> >>>
> >>>
> >>>> You can see public facing ecommerce application in OFBiz -
> >>>> http://demo.ofbiz.org/ecommerce/control/main
> >>>>
> >>>> Regards
> >>>> Sumit Pandit
> >>>>
> >>>>
> >>>> On 26-Aug-09, at 11:30 AM, Zhiyong Cui wrote:
> >>>>
> >>>>
> >>>>
> >>>>> In Apache OFBiz Business Setup Guide, It is said  that OFBiz provides
> >>>>> a
> >>>>> number of Manager applications, which make up the "back office"
> >>>>> functions
> >>>>> of
> >>>>> the suite. These applications are not intended to be customer or
> >>>>> public
> >>>>> facing, but rather tools to be used to administer and manage the
> OFBiz
> >>>>> software. Is it means that Ofbiz only provides manager applications
> >>>>> ,or
> >>>>> does
> >>>>> it provide some public facing too ?
> >>>>> --
> >>>>> View this message in context:
> >>>>>
> http://www.nabble.com/customer-or-public-facing-tp25147050p25147050.html
> >>>>> Sent from the OFBiz - User mailing list archive at Nabble.com.
> >>>>>
> >>>>>
> >>>>>
> >>> --
> >>>
> >>> Best
> >>>
> >>> Carsten Schinzer
> >>>
> >>> Waisenhausstr. 53a
> >>> 80637 München
> >>> Germany
> >>>
> >>>
> >>>
> >>
> >>
> >
> >
> >
>
> --
> View this message in context:
> http://www.nabble.com/customer-or-public-facing-tp25147050p25166914.html
> Sent from the OFBiz - User mailing list archive at Nabble.com.
>
>


--

Best

Carsten Schinzer

Waisenhausstr. 53a
80637 München
Germany
Reply | Threaded
Open this post in threaded view
|

Re: customer or public facing

Jacques Le Roux-2-2
In reply to this post by c.schinzer
Hi Carsten,

This would be interesting to have in wiki (even if it's not updated later but we should mention it), in relation with security page
(that I will change soon to Authorization page). Could you
attach to it please http://docs.ofbiz.org/display/OFBTECH/OFBiz+security

Jacques


From: "Carsten Schinzer" <[hidden email]>
Hi,

I've done a deep analysis of the ROLEs that come with OFBiz seed-initial,
seed and demo data feeds.
It is in Excel, so I cannot attach it here. If you want a copy, please
contact me directly.

The work is based upon low-level research on any *SecurityData.xml file in
OFBIZ_HOME.

Reading those and understanding the concept of
* how SecurityGroups are defined
* how Users are assigned to SecurityGroups
* how permissions are granted for certain Applications
will help you do your own. Also, play around with the demo data.

Kind regards


Carsten

2009/8/27 Zhiyong Cui <[hidden email]>

>
> If I need to integrate all these or other functionality ,and get it more
> specialist and detail。example for , I need some roles CEO、CTO 、 Warehouse
> manager and so on. and each role have different permissions。Then I must do
> it myself or ofbiz also supports it ? If I must do it , could someone give
> me some advice ? or I could follow the Myportal app? Thanks.
>
> Ashish Vijaywargiya-5 wrote:
> >
> > Refer MyPortal section in OFBiz - This will help you to see the task
> > that is being assigned to you.
> >
> > If you want to see the general information of other through HR
> > application in read mode then it is possible in OFBiz.
> > Try to do login by demoadmin/ofbiz user.
> > For setting the permissions and related stuff please refer Party -->
> > Security tab - then see how the things are organized by viewing the
> > internal details present inside each security group.
> >
> > --
> > Ashish
> >
> > Zhiyong Cui wrote:
> >> Thanks for all replies above.
> >> What I want to know are below.
> >> if I am a employee of Company  , what I should responsible for is one
> >> step
> >> of the  manufacturing example for a task , so I should be able to know
> >> the
> >> tasks belong to me but I should  not see any tasks belong to others .
> >> because I am a employee , I should be able to see all general
> information
> >> of
> >> others through the HR application  . but I should not update it . Does
> >> Ofbiz
> >> provide this sort of things ?
> >>
> >> Carsten Schinzer wrote:
> >>
> >>> I am not sure whether I get the question right. However, I'll try with
> >>> the
> >>> following:
> >>>
> >>> The OFBiz instance will expose all webapplications that are published
> to
> >>> the
> >>> public IP address used. However, the manager applications by default
> >>> will
> >>> require a password in order to access them (so you may consider those
> >>> applications an "extranet" functionality).
> >>>
> >>> Beware that still EVERYONE can access the login pages for the manager
> >>> applications. That is the reason for the recommendation to change the
> >>> passwords for all admin users if you do not start blank but rather from
> >>> the
> >>> Demo setup.
> >>>
> >>> Also, if you do not protect them explicitly, the webapps like e.g.
> >>> cmssite,
> >>> ecommerce, ecomclone etc will be freely accessible.
> >>> So rather play around on a local install (or the demo site that Sumit
> >>> indicated) before you start up your instance on the public IP address
> >>> and
> >>> accidentially disclose all your confidential information to the world.
> >>>
> >>> Kind regards
> >>>
> >>>
> >>> Carsten
> >>>
> >>> 2009/8/26 Sumit Pandit <[hidden email]>
> >>>
> >>>
> >>>> You can see public facing ecommerce application in OFBiz -
> >>>> http://demo.ofbiz.org/ecommerce/control/main
> >>>>
> >>>> Regards
> >>>> Sumit Pandit
> >>>>
> >>>>
> >>>> On 26-Aug-09, at 11:30 AM, Zhiyong Cui wrote:
> >>>>
> >>>>
> >>>>
> >>>>> In Apache OFBiz Business Setup Guide, It is said  that OFBiz provides
> >>>>> a
> >>>>> number of Manager applications, which make up the "back office"
> >>>>> functions
> >>>>> of
> >>>>> the suite. These applications are not intended to be customer or
> >>>>> public
> >>>>> facing, but rather tools to be used to administer and manage the
> OFBiz
> >>>>> software. Is it means that Ofbiz only provides manager applications
> >>>>> ,or
> >>>>> does
> >>>>> it provide some public facing too ?
> >>>>> --
> >>>>> View this message in context:
> >>>>>
> http://www.nabble.com/customer-or-public-facing-tp25147050p25147050.html
> >>>>> Sent from the OFBiz - User mailing list archive at Nabble.com.
> >>>>>
> >>>>>
> >>>>>
> >>> --
> >>>
> >>> Best
> >>>
> >>> Carsten Schinzer
> >>>
> >>> Waisenhausstr. 53a
> >>> 80637 München
> >>> Germany
> >>>
> >>>
> >>>
> >>
> >>
> >
> >
> >
>
> --
> View this message in context:
> http://www.nabble.com/customer-or-public-facing-tp25147050p25166914.html
> Sent from the OFBiz - User mailing list archive at Nabble.com.
>
>


--

Best

Carsten Schinzer

Waisenhausstr. 53a
80637 München
Germany

Reply | Threaded
Open this post in threaded view
|

Re: customer or public facing

Jacques Le Roux
Administrator
In reply to this post by Zhiyong Cui
Done : http://docs.ofbiz.org/pages/viewpageattachments.action?pageId=3594

Jacques

From: "Jacques Le Roux" <[hidden email]>

> Hi Carsten,
>
> This would be interesting to have in wiki (even if it's not updated later but we should mention it), in relation with security
> page (that I will change soon to Authorization page). Could you
> attach to it please http://docs.ofbiz.org/display/OFBTECH/OFBiz+security
>
> Jacques
>
>
> From: "Carsten Schinzer" <[hidden email]>
> Hi,
>
> I've done a deep analysis of the ROLEs that come with OFBiz seed-initial,
> seed and demo data feeds.
> It is in Excel, so I cannot attach it here. If you want a copy, please
> contact me directly.
>
> The work is based upon low-level research on any *SecurityData.xml file in
> OFBIZ_HOME.
>
> Reading those and understanding the concept of
> * how SecurityGroups are defined
> * how Users are assigned to SecurityGroups
> * how permissions are granted for certain Applications
> will help you do your own. Also, play around with the demo data.
>
> Kind regards
>
>
> Carsten
>
> 2009/8/27 Zhiyong Cui <[hidden email]>
>
>>
>> If I need to integrate all these or other functionality ,and get it more
>> specialist and detail。example for , I need some roles CEO、CTO 、 Warehouse
>> manager and so on. and each role have different permissions。Then I must do
>> it myself or ofbiz also supports it ? If I must do it , could someone give
>> me some advice ? or I could follow the Myportal app? Thanks.
>>
>> Ashish Vijaywargiya-5 wrote:
>> >
>> > Refer MyPortal section in OFBiz - This will help you to see the task
>> > that is being assigned to you.
>> >
>> > If you want to see the general information of other through HR
>> > application in read mode then it is possible in OFBiz.
>> > Try to do login by demoadmin/ofbiz user.
>> > For setting the permissions and related stuff please refer Party -->
>> > Security tab - then see how the things are organized by viewing the
>> > internal details present inside each security group.
>> >
>> > --
>> > Ashish
>> >
>> > Zhiyong Cui wrote:
>> >> Thanks for all replies above.
>> >> What I want to know are below.
>> >> if I am a employee of Company  , what I should responsible for is one
>> >> step
>> >> of the  manufacturing example for a task , so I should be able to know
>> >> the
>> >> tasks belong to me but I should  not see any tasks belong to others .
>> >> because I am a employee , I should be able to see all general
>> information
>> >> of
>> >> others through the HR application  . but I should not update it . Does
>> >> Ofbiz
>> >> provide this sort of things ?
>> >>
>> >> Carsten Schinzer wrote:
>> >>
>> >>> I am not sure whether I get the question right. However, I'll try with
>> >>> the
>> >>> following:
>> >>>
>> >>> The OFBiz instance will expose all webapplications that are published
>> to
>> >>> the
>> >>> public IP address used. However, the manager applications by default
>> >>> will
>> >>> require a password in order to access them (so you may consider those
>> >>> applications an "extranet" functionality).
>> >>>
>> >>> Beware that still EVERYONE can access the login pages for the manager
>> >>> applications. That is the reason for the recommendation to change the
>> >>> passwords for all admin users if you do not start blank but rather from
>> >>> the
>> >>> Demo setup.
>> >>>
>> >>> Also, if you do not protect them explicitly, the webapps like e.g.
>> >>> cmssite,
>> >>> ecommerce, ecomclone etc will be freely accessible.
>> >>> So rather play around on a local install (or the demo site that Sumit
>> >>> indicated) before you start up your instance on the public IP address
>> >>> and
>> >>> accidentially disclose all your confidential information to the world.
>> >>>
>> >>> Kind regards
>> >>>
>> >>>
>> >>> Carsten
>> >>>
>> >>> 2009/8/26 Sumit Pandit <[hidden email]>
>> >>>
>> >>>
>> >>>> You can see public facing ecommerce application in OFBiz -
>> >>>> http://demo.ofbiz.org/ecommerce/control/main
>> >>>>
>> >>>> Regards
>> >>>> Sumit Pandit
>> >>>>
>> >>>>
>> >>>> On 26-Aug-09, at 11:30 AM, Zhiyong Cui wrote:
>> >>>>
>> >>>>
>> >>>>
>> >>>>> In Apache OFBiz Business Setup Guide, It is said  that OFBiz provides
>> >>>>> a
>> >>>>> number of Manager applications, which make up the "back office"
>> >>>>> functions
>> >>>>> of
>> >>>>> the suite. These applications are not intended to be customer or
>> >>>>> public
>> >>>>> facing, but rather tools to be used to administer and manage the
>> OFBiz
>> >>>>> software. Is it means that Ofbiz only provides manager applications
>> >>>>> ,or
>> >>>>> does
>> >>>>> it provide some public facing too ?
>> >>>>> --
>> >>>>> View this message in context:
>> >>>>>
>> http://www.nabble.com/customer-or-public-facing-tp25147050p25147050.html
>> >>>>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>> >>>>>
>> >>>>>
>> >>>>>
>> >>> --
>> >>>
>> >>> Best
>> >>>
>> >>> Carsten Schinzer
>> >>>
>> >>> Waisenhausstr. 53a
>> >>> 80637 München
>> >>> Germany
>> >>>
>> >>>
>> >>>
>> >>
>> >>
>> >
>> >
>> >
>>
>> --
>> View this message in context:
>> http://www.nabble.com/customer-or-public-facing-tp25147050p25166914.html
>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>>
>>
>
>
> --
>
> Best
>
> Carsten Schinzer
>
> Waisenhausstr. 53a
> 80637 München
> Germany
>