Mailing-List: contact user-help@ofbiz.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@ofbiz.apache.org
Received-SPF: pass (athena.apache.org: local policy)
Message-ID: <4C051878.10106@hotwaxmedia.com>
Date: Tue, 01 Jun 2010 19:56:00 +0530
From: rahul jain <rahul.jain@hotwaxmedia.com>
User-Agent: Thunderbird 2.0.0.21 (X11/20090318)
MIME-Version: 1.0
To: user@ofbiz.apache.org
Subject: Re: Access Control
References: <004101cb010e$29a65e50$7cf31af0$@net>
In-Reply-To: <004101cb010e$29a65e50$7cf31af0$@net>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Rick_O wrote:
> I am a newbie to the list so I will apologize in advance I have not quite
> figured out all of the documentation, so I am hoping someone can point me to
> where I can find information on setting up access control / role based
> security.   I am trying to figure out the capabilities on limiting access
> based upon Role, or specific user ID.  So all customer service reps can
> enter orders, but only the Customer Service Manager can process a return.
>
>  
>
> Thanks, 
>
>  
>
> Rick
>
>
>   
Hello Rick,
                   The purpose of role-limited permissions is to tie a 
Security Permission to record level security using the 
RoleType/PartyRole and related entities. In OFBiz this is how record 
level permissions are done. All other informations related to security 
permission you will get in this document.

https://cwiki.apache.org/confluence/display/OFBTECH/OFBiz+security

Thanks & Regards
Rahul Jain