help for security system

[rahul das probal]

sir,
when i create an user as employee of company x and give him permission
to access and create "organization GL" like chart of account or
transaction the employee of company x can make it  not from only
company x but also from others company. eg though he is an employee of
company x he can manage transaction or chart of account from company y
,z etc.

   is it possible that one employee of a certain company cannot
access or cannot see or can't transaction the char of account,billing
account,or financial account of other company?


[eg. when i give permission to employee of company x that he can only
set the chart of account he can set the chart of account not only of
company x but also of other companies i want that he only see and can
set or manage the chart of account of company x cannot access or
manage the other companies' chart of accounts or transactions.]

thank you

[Pierre Smits]

First of all, question yourself why it is needed to provide access to an
outsider of the company that is using OFBiz as its accounting solution to
the means to create, update and delete functions in that solution.

If you are talking about external auditors then it might hold true. But,
then you should consider whether read access isn't enough. Effecting
changes in accounting (or any other part of the system) should only be done
by appointed officers.

Having said that, I believe there is currently no solution in effect that
facilitates the request your conveying (if I understand your issue
correctly), other than setting up a tenant for each other company. That
effectively ensures what you request. Users of Company X's tenant won't see
anything beyond their own tenant instantiation.

Regards,

Pierre

2012/5/2 rahul das probal <[hidden email]>

> sir,
> when i create an user as employee of company x and give him permission
> to access and create "organization GL" like chart of account or
> transaction the employee of company x can make it  not from only
> company x but also from others company. eg though he is an employee of
> company x he can manage transaction or chart of account from company y
> ,z etc.
>
>   is it possible that one employee of a certain company cannot
> access or cannot see or can't transaction the char of account,billing
> account,or financial account of other company?
>
>
> [eg. when i give permission to employee of company x that he can only
> set the chart of account he can set the chart of account not only of
> company x but also of other companies i want that he only see and can
> set or manage the chart of account of company x cannot access or
> manage the other companies' chart of accounts or transactions.]
>
> thank you
>

[Prabhakar Balakrishna]

I propose to adopt multi-tenancy feature for your application.
On 2 May 2012 12:31, Pierre Smits <[hidden email]> wrote:

> First of all, question yourself why it is needed to provide access to an
> outsider of the company that is using OFBiz as its accounting solution to
> the means to create, update and delete functions in that solution.
>
> If you are talking about external auditors then it might hold true. But,
> then you should consider whether read access isn't enough. Effecting
> changes in accounting (or any other part of the system) should only be done
> by appointed officers.
>
> Having said that, I believe there is currently no solution in effect that
> facilitates the request your conveying (if I understand your issue
> correctly), other than setting up a tenant for each other company. That
> effectively ensures what you request. Users of Company X's tenant won't see
> anything beyond their own tenant instantiation.
>
> Regards,
>
> Pierre
>
> 2012/5/2 rahul das probal <[hidden email]>
>
>> sir,
>> when i create an user as employee of company x and give him permission
>> to access and create "organization GL" like chart of account or
>> transaction the employee of company x can make it  not from only
>> company x but also from others company. eg though he is an employee of
>> company x he can manage transaction or chart of account from company y
>> ,z etc.
>>
>>   is it possible that one employee of a certain company cannot
>> access or cannot see or can't transaction the char of account,billing
>> account,or financial account of other company?
>>
>>
>> [eg. when i give permission to employee of company x that he can only
>> set the chart of account he can set the chart of account not only of
>> company x but also of other companies i want that he only see and can
>> set or manage the chart of account of company x cannot access or
>> manage the other companies' chart of accounts or transactions.]
>>
>> thank you
>>

--
A Question for God every morning.
What is the main event today? What do you want me to focus on today?
God Speed...
Thanks & Regards
Prabhakar Balakrishna
[phone]

[Bordin Phayaphrom (Alex)]

I am newbies, but what I did is, set each company (if it's the same group
of the companies) as an internal organization with it's own GLaccount. When
you setting the store and facilities, you have to identify the
shop/store/facilities owner each, then set permission of each user to use
with each store.

The result I have got,
1.The Sales Order pdf will show different company according to the store
sales/organization
2. The accounting will be consolidated to the parents company ( you need to
set relation of internal organization as a group member of parent
organization) and you can print P&L, other accounting in different in.orgtoo.
3. You also need to go to entity data maintenance >> choose
PartyAcctgPrefAndGroup ( I can't remember for the currency in each org.
too) to set currency for each internal org.
4. Set employee relationship below of each internal organization will block
them to see other internal org.

Try this.. I am using it and it's fine. ( But my company use central
accounting and central hr as a cost center- therefore, those two department
will see all every internal organization (company)'s transaction)


Rdgs,

Alex

On Wed, May 2, 2012 at 3:53 PM, Prabhakar Balakrishna <
[hidden email]> wrote:

> I propose to adopt multi-tenancy feature for your application.
> On 2 May 2012 12:31, Pierre Smits <[hidden email]> wrote:
> > First of all, question yourself why it is needed to provide access to an
> > outsider of the company that is using OFBiz as its accounting solution to
> > the means to create, update and delete functions in that solution.
> >
> > If you are talking about external auditors then it might hold true. But,
> > then you should consider whether read access isn't enough. Effecting
> > changes in accounting (or any other part of the system) should only be
> done
> > by appointed officers.
> >
> > Having said that, I believe there is currently no solution in effect that
> > facilitates the request your conveying (if I understand your issue
> > correctly), other than setting up a tenant for each other company. That
> > effectively ensures what you request. Users of Company X's tenant won't
> see
> > anything beyond their own tenant instantiation.
> >
> > Regards,
> >
> > Pierre
> >
> > 2012/5/2 rahul das probal <[hidden email]>
> >
> >> sir,
> >> when i create an user as employee of company x and give him permission
> >> to access and create "organization GL" like chart of account or
> >> transaction the employee of company x can make it  not from only
> >> company x but also from others company. eg though he is an employee of
> >> company x he can manage transaction or chart of account from company y
> >> ,z etc.
> >>
> >>   is it possible that one employee of a certain company cannot
> >> access or cannot see or can't transaction the char of account,billing
> >> account,or financial account of other company?
> >>
> >>
> >> [eg. when i give permission to employee of company x that he can only
> >> set the chart of account he can set the chart of account not only of
> >> company x but also of other companies i want that he only see and can
> >> set or manage the chart of account of company x cannot access or
> >> manage the other companies' chart of accounts or transactions.]
> >>
> >> thank you
> >>
>
>
>
> --
> A Question for God every morning.
> What is the main event today? What do you want me to focus on today?
> God Speed...
> Thanks & Regards
> Prabhakar Balakrishna
> [phone]
>