ofbiz security

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
9 messages Options
Reply | Threaded
Open this post in threaded view
|

ofbiz security

acec acec
Hi,
I finished Hello World 1 from
http://www.opensourcestrategies.com/ofbiz/tutorials.php

I tried some security functions on hello3.
-------------step 1-----------------------
I added <security> as following:
<request-map uri="main">
  <security https="false" auth="true"/>
  <response name="success" type="view" value="main"/>
</request-map>

When I access
http://localhost:8080/hello1/control/main, I saw the
login form. After I login as "admin" user, I saw the
main screen. Everything works well.

-------------step 2-----------------------
I want to my application only be accessed by specific
login user: hellouser
Then I login as "admin" user, but I can not find the
place to add login user on
https://localhost:8443/webtools/control/main

Do you know how can I add a new login user?

Thanks.
tomcat acec


      __________________________________________________________________
Looking for the perfect gift? Give the gift of Flickr!

http://www.flickr.com/gift/
Reply | Threaded
Open this post in threaded view
|

Re: ofbiz security

Adrian Crum
Use the Party Manager to create new users.

-Adrian

acec acec wrote:

> Hi,
> I finished Hello World 1 from
> http://www.opensourcestrategies.com/ofbiz/tutorials.php
>
> I tried some security functions on hello3.
> -------------step 1-----------------------
> I added <security> as following:
> <request-map uri="main">
>   <security https="false" auth="true"/>
>   <response name="success" type="view" value="main"/>
> </request-map>
>
> When I access
> http://localhost:8080/hello1/control/main, I saw the
> login form. After I login as "admin" user, I saw the
> main screen. Everything works well.
>
> -------------step 2-----------------------
> I want to my application only be accessed by specific
> login user: hellouser
> Then I login as "admin" user, but I can not find the
> place to add login user on
> https://localhost:8443/webtools/control/main
>
> Do you know how can I add a new login user?
>
> Thanks.
> tomcat acec
>
>
>       __________________________________________________________________
> Looking for the perfect gift? Give the gift of Flickr!
>
> http://www.flickr.com/gift/
>
Reply | Threaded
Open this post in threaded view
|

Re: ofbiz security

BJ Freeman
In reply to this post by acec acec
opentaps is using a version of ofbiz that does not include the latest
updates.
If you wish help here please use the SVN (trunk or ver4.0) and the
latest version.
you have two things to add.
the login is part of a party. So you have create a party then the login,
then the security.
second you have to add the security level to your hello1.
you can look at code in the widgets and ftls that show how security and
roles are implemented.

acec acec sent the following on 4/16/2008 9:13 AM:

> Hi,
> I finished Hello World 1 from
> http://www.opensourcestrategies.com/ofbiz/tutorials.php
>
> I tried some security functions on hello3.
> -------------step 1-----------------------
> I added <security> as following:
> <request-map uri="main">
>   <security https="false" auth="true"/>
>   <response name="success" type="view" value="main"/>
> </request-map>
>
> When I access
> http://localhost:8080/hello1/control/main, I saw the
> login form. After I login as "admin" user, I saw the
> main screen. Everything works well.
>
> -------------step 2-----------------------
> I want to my application only be accessed by specific
> login user: hellouser
> Then I login as "admin" user, but I can not find the
> place to add login user on
> https://localhost:8443/webtools/control/main
>
> Do you know how can I add a new login user?
>
> Thanks.
> tomcat acec
>
>
>       __________________________________________________________________
> Looking for the perfect gift? Give the gift of Flickr!
>
> http://www.flickr.com/gift/
>
>
>

Reply | Threaded
Open this post in threaded view
|

Re: ofbiz security

acec acec
I am using ofbiz from ofbiz/branches/release4.0

I did the following steps:

1: Created a New Person(First Name = hellouser / Last
Name = hellouser) from Party Manager Application.

2: In "User Name(s)" section of Party Profile, I
created UserLogin(User Login Id = hellologin).

3: In security tab of Party Manager Application, I
create a New Security Group(ID = hello1admin).

4: In User Logins tab of Security Group, I added
hellologin into Security Group(ID=hello1admin)

------------------------------------------------
In Permissions for SecurityGroup with ID [hello1admin]
screen, I saw a list of all permissions, Where can I
add new permission for hello1?

Thanks.
Arden

--- BJ Freeman <[hidden email]> wrote:

> opentaps is using a version of ofbiz that does not
> include the latest
> updates.
> If you wish help here please use the SVN (trunk or
> ver4.0) and the
> latest version.
> you have two things to add.
> the login is part of a party. So you have create a
> party then the login,
> then the security.
> second you have to add the security level to your
> hello1.
> you can look at code in the widgets and ftls that
> show how security and
> roles are implemented.
>
> acec acec sent the following on 4/16/2008 9:13 AM:
> > Hi,
> > I finished Hello World 1 from
> >
>
http://www.opensourcestrategies.com/ofbiz/tutorials.php

> >
> > I tried some security functions on hello3.
> > -------------step 1-----------------------
> > I added <security> as following:
> > <request-map uri="main">
> >   <security https="false" auth="true"/>
> >   <response name="success" type="view"
> value="main"/>
> > </request-map>
> >
> > When I access
> > http://localhost:8080/hello1/control/main, I saw
> the
> > login form. After I login as "admin" user, I saw
> the
> > main screen. Everything works well.
> >
> > -------------step 2-----------------------
> > I want to my application only be accessed by
> specific
> > login user: hellouser
> > Then I login as "admin" user, but I can not find
> the
> > place to add login user on
> > https://localhost:8443/webtools/control/main
> >
> > Do you know how can I add a new login user?
> >
> > Thanks.
> > tomcat acec
> >
> >
> >      
>
__________________________________________________________________
> > Looking for the perfect gift? Give the gift of
> Flickr!
> >
> > http://www.flickr.com/gift/
> >
> >
> >
>
>



      __________________________________________________________________
Be smarter than spam. See how smart SpamGuard is at giving junk email the boot with the All-new Yahoo! Mail.  Click on Options in Mail and switch to New Mail today or register for free at http://mail.yahoo.ca
Reply | Threaded
Open this post in threaded view
|

Re: ofbiz security

acec acec
After the following 4 steps:

1: Created a New Person(First Name = hellouser / Last
Name = hellouser) from Party Manager Application.

2: In "User Name(s)" section of Party Profile, I
created UserLogin(User Login Id = hellologin).

3: In security tab of Party Manager Application, I
create a New Security Group(ID = hello1admin).

4: In User Logins tab of Security Group, I added
hellologin into Security Group(ID=hello1admin)


I can login as hellologin user, if I remove
base-permission="HELLOUSER" from
<webapp name="hello1" title="Hello1"
                server="default-server" location="webapp/hello1"
                mount-point="/hello1" app-bar-display="false" />

If I have to add a new permission: HELLOUSER, what can
I do ?
Thanks a lot.







--- acec acec <[hidden email]> wrote:

> I am using ofbiz from ofbiz/branches/release4.0
>
> I did the following steps:
>
> 1: Created a New Person(First Name = hellouser /
> Last
> Name = hellouser) from Party Manager Application.
>
> 2: In "User Name(s)" section of Party Profile, I
> created UserLogin(User Login Id = hellologin).
>
> 3: In security tab of Party Manager Application, I
> create a New Security Group(ID = hello1admin).
>
> 4: In User Logins tab of Security Group, I added
> hellologin into Security Group(ID=hello1admin)
>
> ------------------------------------------------
> In Permissions for SecurityGroup with ID
> [hello1admin]
> screen, I saw a list of all permissions, Where can I
> add new permission for hello1?
>
> Thanks.
> Arden
>
> --- BJ Freeman <[hidden email]> wrote:
>
> > opentaps is using a version of ofbiz that does not
> > include the latest
> > updates.
> > If you wish help here please use the SVN (trunk or
> > ver4.0) and the
> > latest version.
> > you have two things to add.
> > the login is part of a party. So you have create a
> > party then the login,
> > then the security.
> > second you have to add the security level to your
> > hello1.
> > you can look at code in the widgets and ftls that
> > show how security and
> > roles are implemented.
> >
> > acec acec sent the following on 4/16/2008 9:13 AM:
> > > Hi,
> > > I finished Hello World 1 from
> > >
> >
>
http://www.opensourcestrategies.com/ofbiz/tutorials.php

> > >
> > > I tried some security functions on hello3.
> > > -------------step 1-----------------------
> > > I added <security> as following:
> > > <request-map uri="main">
> > >   <security https="false" auth="true"/>
> > >   <response name="success" type="view"
> > value="main"/>
> > > </request-map>
> > >
> > > When I access
> > > http://localhost:8080/hello1/control/main, I saw
> > the
> > > login form. After I login as "admin" user, I saw
> > the
> > > main screen. Everything works well.
> > >
> > > -------------step 2-----------------------
> > > I want to my application only be accessed by
> > specific
> > > login user: hellouser
> > > Then I login as "admin" user, but I can not find
> > the
> > > place to add login user on
> > > https://localhost:8443/webtools/control/main
> > >
> > > Do you know how can I add a new login user?
> > >
> > > Thanks.
> > > tomcat acec
> > >
> > >
> > >      
> >
>
__________________________________________________________________

> > > Looking for the perfect gift? Give the gift of
> > Flickr!
> > >
> > > http://www.flickr.com/gift/
> > >
> > >
> > >
> >
> >
>
>
>
>      
>
__________________________________________________________________
> Be smarter than spam. See how smart SpamGuard is at
> giving junk email the boot with the All-new Yahoo!
> Mail.  Click on Options in Mail and switch to New
> Mail today or register for free at
> http://mail.yahoo.ca
>



      __________________________________________________________________
Ask a question on any topic and get answers from real people. Go to Yahoo! Answers and share what you know at http://ca.answers.yahoo.com
Reply | Threaded
Open this post in threaded view
|

Re: ofbiz security

BJ Freeman
the other half of permissions and roles is on the Hello page you created
if you want only certain permissions and or roles to use the page you
need to add those permission to the helloworld page.

you can look at widgets and ftls to see how permissions are used.

acec acec sent the following on 4/16/2008 10:17 AM:

> After the following 4 steps:
>
> 1: Created a New Person(First Name = hellouser / Last
> Name = hellouser) from Party Manager Application.
>
> 2: In "User Name(s)" section of Party Profile, I
> created UserLogin(User Login Id = hellologin).
>
> 3: In security tab of Party Manager Application, I
> create a New Security Group(ID = hello1admin).
>
> 4: In User Logins tab of Security Group, I added
> hellologin into Security Group(ID=hello1admin)
>
>
> I can login as hellologin user, if I remove
> base-permission="HELLOUSER" from
> <webapp name="hello1" title="Hello1"
> server="default-server" location="webapp/hello1"
> mount-point="/hello1" app-bar-display="false" />
>
> If I have to add a new permission: HELLOUSER, what can
> I do ?
> Thanks a lot.
>
>
>
>
>
>
>
> --- acec acec <[hidden email]> wrote:
>
>> I am using ofbiz from ofbiz/branches/release4.0
>>
>> I did the following steps:
>>
>> 1: Created a New Person(First Name = hellouser /
>> Last
>> Name = hellouser) from Party Manager Application.
>>
>> 2: In "User Name(s)" section of Party Profile, I
>> created UserLogin(User Login Id = hellologin).
>>
>> 3: In security tab of Party Manager Application, I
>> create a New Security Group(ID = hello1admin).
>>
>> 4: In User Logins tab of Security Group, I added
>> hellologin into Security Group(ID=hello1admin)
>>
>> ------------------------------------------------
>> In Permissions for SecurityGroup with ID
>> [hello1admin]
>> screen, I saw a list of all permissions, Where can I
>> add new permission for hello1?
>>
>> Thanks.
>> Arden
>>
>> --- BJ Freeman <[hidden email]> wrote:
>>
>>> opentaps is using a version of ofbiz that does not
>>> include the latest
>>> updates.
>>> If you wish help here please use the SVN (trunk or
>>> ver4.0) and the
>>> latest version.
>>> you have two things to add.
>>> the login is part of a party. So you have create a
>>> party then the login,
>>> then the security.
>>> second you have to add the security level to your
>>> hello1.
>>> you can look at code in the widgets and ftls that
>>> show how security and
>>> roles are implemented.
>>>
>>> acec acec sent the following on 4/16/2008 9:13 AM:
>>>> Hi,
>>>> I finished Hello World 1 from
>>>>
> http://www.opensourcestrategies.com/ofbiz/tutorials.php
>>>> I tried some security functions on hello3.
>>>> -------------step 1-----------------------
>>>> I added <security> as following:
>>>> <request-map uri="main">
>>>>   <security https="false" auth="true"/>
>>>>   <response name="success" type="view"
>>> value="main"/>
>>>> </request-map>
>>>>
>>>> When I access
>>>> http://localhost:8080/hello1/control/main, I saw
>>> the
>>>> login form. After I login as "admin" user, I saw
>>> the
>>>> main screen. Everything works well.
>>>>
>>>> -------------step 2-----------------------
>>>> I want to my application only be accessed by
>>> specific
>>>> login user: hellouser
>>>> Then I login as "admin" user, but I can not find
>>> the
>>>> place to add login user on
>>>> https://localhost:8443/webtools/control/main
>>>>
>>>> Do you know how can I add a new login user?
>>>>
>>>> Thanks.
>>>> tomcat acec
>>>>
>>>>
>>>>      
> __________________________________________________________________
>>>> Looking for the perfect gift? Give the gift of
>>> Flickr!
>>>> http://www.flickr.com/gift/
>>>>
>>>>
>>>>
>>>
>>
>>
>>      
>>
> __________________________________________________________________
>> Be smarter than spam. See how smart SpamGuard is at
>> giving junk email the boot with the All-new Yahoo!
>> Mail.  Click on Options in Mail and switch to New
>> Mail today or register for free at
>> http://mail.yahoo.ca
>>
>
>
>
>       __________________________________________________________________
> Ask a question on any topic and get answers from real people. Go to Yahoo! Answers and share what you know at http://ca.answers.yahoo.com
>
>
>

Reply | Threaded
Open this post in threaded view
|

Re: ofbiz security

acec acec
I added Permission(Permission ID = HELLOP1) into
SecurityGroup(ID = hello1admin), then I added
base-permission="HELLOP1" into <webapp name="hello1"
..>

But I still can not login as hellologin user, is there
any step by step tutorial of ofbiz security?

Thanks.


--- BJ Freeman <[hidden email]> wrote:

> the other half of permissions and roles is on the
> Hello page you created
> if you want only certain permissions and or roles to
> use the page you
> need to add those permission to the helloworld page.
>
> you can look at widgets and ftls to see how
> permissions are used.
>
> acec acec sent the following on 4/16/2008 10:17 AM:
> > After the following 4 steps:
> >
> > 1: Created a New Person(First Name = hellouser /
> Last
> > Name = hellouser) from Party Manager Application.
> >
> > 2: In "User Name(s)" section of Party Profile, I
> > created UserLogin(User Login Id = hellologin).
> >
> > 3: In security tab of Party Manager Application, I
> > create a New Security Group(ID = hello1admin).
> >
> > 4: In User Logins tab of Security Group, I added
> > hellologin into Security Group(ID=hello1admin)
> >
> >
> > I can login as hellologin user, if I remove
> > base-permission="HELLOUSER" from
> > <webapp name="hello1" title="Hello1"
> > server="default-server" location="webapp/hello1"
> > mount-point="/hello1" app-bar-display="false" />
> >
> > If I have to add a new permission: HELLOUSER, what
> can
> > I do ?
> > Thanks a lot.
> >
> >
> >
> >
> >
> >
> >
> > --- acec acec <[hidden email]> wrote:
> >
> >> I am using ofbiz from ofbiz/branches/release4.0
> >>
> >> I did the following steps:
> >>
> >> 1: Created a New Person(First Name = hellouser /
> >> Last
> >> Name = hellouser) from Party Manager Application.
> >>
> >> 2: In "User Name(s)" section of Party Profile, I
> >> created UserLogin(User Login Id = hellologin).
> >>
> >> 3: In security tab of Party Manager Application,
> I
> >> create a New Security Group(ID = hello1admin).
> >>
> >> 4: In User Logins tab of Security Group, I added
> >> hellologin into Security Group(ID=hello1admin)
> >>
> >> ------------------------------------------------
> >> In Permissions for SecurityGroup with ID
> >> [hello1admin]
> >> screen, I saw a list of all permissions, Where
> can I
> >> add new permission for hello1?
> >>
> >> Thanks.
> >> Arden
> >>
> >> --- BJ Freeman <[hidden email]> wrote:
> >>
> >>> opentaps is using a version of ofbiz that does
> not
> >>> include the latest
> >>> updates.
> >>> If you wish help here please use the SVN (trunk
> or
> >>> ver4.0) and the
> >>> latest version.
> >>> you have two things to add.
> >>> the login is part of a party. So you have create
> a
> >>> party then the login,
> >>> then the security.
> >>> second you have to add the security level to
> your
> >>> hello1.
> >>> you can look at code in the widgets and ftls
> that
> >>> show how security and
> >>> roles are implemented.
> >>>
> >>> acec acec sent the following on 4/16/2008 9:13
> AM:
> >>>> Hi,
> >>>> I finished Hello World 1 from
> >>>>
> >
>
http://www.opensourcestrategies.com/ofbiz/tutorials.php

> >>>> I tried some security functions on hello3.
> >>>> -------------step 1-----------------------
> >>>> I added <security> as following:
> >>>> <request-map uri="main">
> >>>>   <security https="false" auth="true"/>
> >>>>   <response name="success" type="view"
> >>> value="main"/>
> >>>> </request-map>
> >>>>
> >>>> When I access
> >>>> http://localhost:8080/hello1/control/main, I
> saw
> >>> the
> >>>> login form. After I login as "admin" user, I
> saw
> >>> the
> >>>> main screen. Everything works well.
> >>>>
> >>>> -------------step 2-----------------------
> >>>> I want to my application only be accessed by
> >>> specific
> >>>> login user: hellouser
> >>>> Then I login as "admin" user, but I can not
> find
> >>> the
> >>>> place to add login user on
> >>>> https://localhost:8443/webtools/control/main
> >>>>
> >>>> Do you know how can I add a new login user?
> >>>>
> >>>> Thanks.
> >>>> tomcat acec
> >>>>
> >>>>
> >>>>      
> >
>
__________________________________________________________________

> >>>> Looking for the perfect gift? Give the gift of
> >>> Flickr!
> >>>> http://www.flickr.com/gift/
> >>>>
> >>>>
> >>>>
> >>>
> >>
> >>
> >>      
> >>
> >
>
__________________________________________________________________

> >> Be smarter than spam. See how smart SpamGuard is
> at
> >> giving junk email the boot with the All-new
> Yahoo!
> >> Mail.  Click on Options in Mail and switch to New
> >> Mail today or register for free at
> >> http://mail.yahoo.ca
> >>
> >
> >
> >
> >      
>
__________________________________________________________________
> > Ask a question on any topic and get answers from
> real people. Go to Yahoo! Answers and share what you
> know at http://ca.answers.yahoo.com
> >
> >
> >
>
>



      __________________________________________________________________
Get a sneak peak at messages with a handy reading pane with All new Yahoo! Mail: http://ca.promos.yahoo.com/newmail/overview2/
Reply | Threaded
Open this post in threaded view
|

Re: ofbiz security

acec acec
After I create a new permission(Permission ID =
HELLOP1_VIEW) instead of previous one, I can login as
hellologin user.

Thanks.
--- acec acec <[hidden email]> wrote:

> I added Permission(Permission ID = HELLOP1) into
> SecurityGroup(ID = hello1admin), then I added
> base-permission="HELLOP1" into <webapp name="hello1"
> ..>
>
> But I still can not login as hellologin user, is
> there
> any step by step tutorial of ofbiz security?
>
> Thanks.
>
>
> --- BJ Freeman <[hidden email]> wrote:
>
> > the other half of permissions and roles is on the
> > Hello page you created
> > if you want only certain permissions and or roles
> to
> > use the page you
> > need to add those permission to the helloworld
> page.
> >
> > you can look at widgets and ftls to see how
> > permissions are used.
> >
> > acec acec sent the following on 4/16/2008 10:17
> AM:
> > > After the following 4 steps:
> > >
> > > 1: Created a New Person(First Name = hellouser /
> > Last
> > > Name = hellouser) from Party Manager
> Application.
> > >
> > > 2: In "User Name(s)" section of Party Profile, I
> > > created UserLogin(User Login Id = hellologin).
> > >
> > > 3: In security tab of Party Manager Application,
> I
> > > create a New Security Group(ID = hello1admin).
> > >
> > > 4: In User Logins tab of Security Group, I added
> > > hellologin into Security Group(ID=hello1admin)
> > >
> > >
> > > I can login as hellologin user, if I remove
> > > base-permission="HELLOUSER" from
> > > <webapp name="hello1" title="Hello1"
> > > server="default-server"
> location="webapp/hello1"
> > > mount-point="/hello1" app-bar-display="false"
> />
> > >
> > > If I have to add a new permission: HELLOUSER,
> what
> > can
> > > I do ?
> > > Thanks a lot.
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > --- acec acec <[hidden email]> wrote:
> > >
> > >> I am using ofbiz from ofbiz/branches/release4.0
> > >>
> > >> I did the following steps:
> > >>
> > >> 1: Created a New Person(First Name = hellouser
> /
> > >> Last
> > >> Name = hellouser) from Party Manager
> Application.
> > >>
> > >> 2: In "User Name(s)" section of Party Profile,
> I
> > >> created UserLogin(User Login Id = hellologin).
> > >>
> > >> 3: In security tab of Party Manager
> Application,
> > I
> > >> create a New Security Group(ID = hello1admin).
> > >>
> > >> 4: In User Logins tab of Security Group, I
> added
> > >> hellologin into Security Group(ID=hello1admin)
> > >>
> > >>
> ------------------------------------------------
> > >> In Permissions for SecurityGroup with ID
> > >> [hello1admin]
> > >> screen, I saw a list of all permissions, Where
> > can I
> > >> add new permission for hello1?
> > >>
> > >> Thanks.
> > >> Arden
> > >>
> > >> --- BJ Freeman <[hidden email]> wrote:
> > >>
> > >>> opentaps is using a version of ofbiz that does
> > not
> > >>> include the latest
> > >>> updates.
> > >>> If you wish help here please use the SVN
> (trunk
> > or
> > >>> ver4.0) and the
> > >>> latest version.
> > >>> you have two things to add.
> > >>> the login is part of a party. So you have
> create
> > a
> > >>> party then the login,
> > >>> then the security.
> > >>> second you have to add the security level to
> > your
> > >>> hello1.
> > >>> you can look at code in the widgets and ftls
> > that
> > >>> show how security and
> > >>> roles are implemented.
> > >>>
> > >>> acec acec sent the following on 4/16/2008 9:13
> > AM:
> > >>>> Hi,
> > >>>> I finished Hello World 1 from
> > >>>>
> > >
> >
>
http://www.opensourcestrategies.com/ofbiz/tutorials.php

> > >>>> I tried some security functions on hello3.
> > >>>> -------------step 1-----------------------
> > >>>> I added <security> as following:
> > >>>> <request-map uri="main">
> > >>>>   <security https="false" auth="true"/>
> > >>>>   <response name="success" type="view"
> > >>> value="main"/>
> > >>>> </request-map>
> > >>>>
> > >>>> When I access
> > >>>> http://localhost:8080/hello1/control/main, I
> > saw
> > >>> the
> > >>>> login form. After I login as "admin" user, I
> > saw
> > >>> the
> > >>>> main screen. Everything works well.
> > >>>>
> > >>>> -------------step 2-----------------------
> > >>>> I want to my application only be accessed by
> > >>> specific
> > >>>> login user: hellouser
> > >>>> Then I login as "admin" user, but I can not
> > find
> > >>> the
> > >>>> place to add login user on
> > >>>> https://localhost:8443/webtools/control/main
> > >>>>
> > >>>> Do you know how can I add a new login user?
> > >>>>
> > >>>> Thanks.
> > >>>> tomcat acec
> > >>>>
> > >>>>
> > >>>>      
> > >
> >
>
__________________________________________________________________

> > >>>> Looking for the perfect gift? Give the gift
> of
> > >>> Flickr!
> > >>>> http://www.flickr.com/gift/
> > >>>>
> > >>>>
> > >>>>
> > >>>
> > >>
> > >>
> > >>      
> > >>
> > >
> >
>
__________________________________________________________________

> > >> Be smarter than spam. See how smart SpamGuard
> is
> > at
> > >> giving junk email the boot with the All-new
> > Yahoo!
> > >> Mail.  Click on Options in Mail and switch to
> New
> > >> Mail today or register for free at
> > >> http://mail.yahoo.ca
> > >>
> > >
> > >
> > >
> > >      
>
=== message truncated ===



      __________________________________________________________________
Ask a question on any topic and get answers from real people. Go to Yahoo! Answers and share what you know at http://ca.answers.yahoo.com
Reply | Threaded
Open this post in threaded view
|

Re: ofbiz security

BJ Freeman
you need to use a current permission that is in the login.
or you have to add the permission that you created via webtools
you can lookup the permission data in the seed data files.

acec acec sent the following on 4/16/2008 2:01 PM:

> After I create a new permission(Permission ID =
> HELLOP1_VIEW) instead of previous one, I can login as
> hellologin user.
>
> Thanks.
> --- acec acec <[hidden email]> wrote:
>
>> I added Permission(Permission ID = HELLOP1) into
>> SecurityGroup(ID = hello1admin), then I added
>> base-permission="HELLOP1" into <webapp name="hello1"
>> ..>
>>
>> But I still can not login as hellologin user, is
>> there
>> any step by step tutorial of ofbiz security?
>>
>> Thanks.
>>
>>
>> --- BJ Freeman <[hidden email]> wrote:
>>
>>> the other half of permissions and roles is on the
>>> Hello page you created
>>> if you want only certain permissions and or roles
>> to
>>> use the page you
>>> need to add those permission to the helloworld
>> page.
>>> you can look at widgets and ftls to see how
>>> permissions are used.
>>>
>>> acec acec sent the following on 4/16/2008 10:17
>> AM:
>>>> After the following 4 steps:
>>>>
>>>> 1: Created a New Person(First Name = hellouser /
>>> Last
>>>> Name = hellouser) from Party Manager
>> Application.
>>>> 2: In "User Name(s)" section of Party Profile, I
>>>> created UserLogin(User Login Id = hellologin).
>>>>
>>>> 3: In security tab of Party Manager Application,
>> I
>>>> create a New Security Group(ID = hello1admin).
>>>>
>>>> 4: In User Logins tab of Security Group, I added
>>>> hellologin into Security Group(ID=hello1admin)
>>>>
>>>>
>>>> I can login as hellologin user, if I remove
>>>> base-permission="HELLOUSER" from
>>>> <webapp name="hello1" title="Hello1"
>>>> server="default-server"
>> location="webapp/hello1"
>>>> mount-point="/hello1" app-bar-display="false"
>> />
>>>> If I have to add a new permission: HELLOUSER,
>> what
>>> can
>>>> I do ?
>>>> Thanks a lot.
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> --- acec acec <[hidden email]> wrote:
>>>>
>>>>> I am using ofbiz from ofbiz/branches/release4.0
>>>>>
>>>>> I did the following steps:
>>>>>
>>>>> 1: Created a New Person(First Name = hellouser
>> /
>>>>> Last
>>>>> Name = hellouser) from Party Manager
>> Application.
>>>>> 2: In "User Name(s)" section of Party Profile,
>> I
>>>>> created UserLogin(User Login Id = hellologin).
>>>>>
>>>>> 3: In security tab of Party Manager
>> Application,
>>> I
>>>>> create a New Security Group(ID = hello1admin).
>>>>>
>>>>> 4: In User Logins tab of Security Group, I
>> added
>>>>> hellologin into Security Group(ID=hello1admin)
>>>>>
>>>>>
>> ------------------------------------------------
>>>>> In Permissions for SecurityGroup with ID
>>>>> [hello1admin]
>>>>> screen, I saw a list of all permissions, Where
>>> can I
>>>>> add new permission for hello1?
>>>>>
>>>>> Thanks.
>>>>> Arden
>>>>>
>>>>> --- BJ Freeman <[hidden email]> wrote:
>>>>>
>>>>>> opentaps is using a version of ofbiz that does
>>> not
>>>>>> include the latest
>>>>>> updates.
>>>>>> If you wish help here please use the SVN
>> (trunk
>>> or
>>>>>> ver4.0) and the
>>>>>> latest version.
>>>>>> you have two things to add.
>>>>>> the login is part of a party. So you have
>> create
>>> a
>>>>>> party then the login,
>>>>>> then the security.
>>>>>> second you have to add the security level to
>>> your
>>>>>> hello1.
>>>>>> you can look at code in the widgets and ftls
>>> that
>>>>>> show how security and
>>>>>> roles are implemented.
>>>>>>
>>>>>> acec acec sent the following on 4/16/2008 9:13
>>> AM:
>>>>>>> Hi,
>>>>>>> I finished Hello World 1 from
>>>>>>>
> http://www.opensourcestrategies.com/ofbiz/tutorials.php
>>>>>>> I tried some security functions on hello3.
>>>>>>> -------------step 1-----------------------
>>>>>>> I added <security> as following:
>>>>>>> <request-map uri="main">
>>>>>>>   <security https="false" auth="true"/>
>>>>>>>   <response name="success" type="view"
>>>>>> value="main"/>
>>>>>>> </request-map>
>>>>>>>
>>>>>>> When I access
>>>>>>> http://localhost:8080/hello1/control/main, I
>>> saw
>>>>>> the
>>>>>>> login form. After I login as "admin" user, I
>>> saw
>>>>>> the
>>>>>>> main screen. Everything works well.
>>>>>>>
>>>>>>> -------------step 2-----------------------
>>>>>>> I want to my application only be accessed by
>>>>>> specific
>>>>>>> login user: hellouser
>>>>>>> Then I login as "admin" user, but I can not
>>> find
>>>>>> the
>>>>>>> place to add login user on
>>>>>>> https://localhost:8443/webtools/control/main
>>>>>>>
>>>>>>> Do you know how can I add a new login user?
>>>>>>>
>>>>>>> Thanks.
>>>>>>> tomcat acec
>>>>>>>
>>>>>>>
>>>>>>>      
> __________________________________________________________________
>>>>>>> Looking for the perfect gift? Give the gift
>> of
>>>>>> Flickr!
>>>>>>> http://www.flickr.com/gift/
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>
>>>>>      
>>>>>
> __________________________________________________________________
>>>>> Be smarter than spam. See how smart SpamGuard
>> is
>>> at
>>>>> giving junk email the boot with the All-new
>>> Yahoo!
>>>>> Mail.  Click on Options in Mail and switch to
>> New
>>>>> Mail today or register for free at
>>>>> http://mail.yahoo.ca
>>>>>
>>>>
>>>>
>>>>      
> === message truncated ===
>
>
>
>       __________________________________________________________________
> Ask a question on any topic and get answers from real people. Go to Yahoo! Answers and share what you know at http://ca.answers.yahoo.com
>
>
>