OFBiz Tutorial - User Permissions

OFBiz Tutorial discussing set-up of user permissions. Apache OFBiz is an open-source enterprise eCommerce project that has collaborators from all over the world. OFBiz tutorials are a valuable resource that many OFBiz developers post for free on the web so that their clients and other users of OFBiz can have the most up-to-date information on how to use the platform as well as the new features that are available.

Apache OFBiz has a base permission for every application sans ecommerce, ofbizwesite and a few others. In order for users to login to the application, they should have "base OFBiz permission view" or "base permission admin". Base permission may consist of more than one permission in which case all permissions are required for a login.

Definition | OFBiz Tutorials

Base permission is defined in the ofbiz-component.xml file for each component. Multiple permissions are separated by a comma character.

Step by Step | OFBiz Tutorials

Now we will set-up permissions for a new user to gain access to a back-end application. We will use an Asset Maint component as an example throughout the tutorial.

First we will create a new user. Login to the party manager app. with the username "admin" and password "ofbiz". Click on the "Create New" link which is located at the top of the main screen.

You will be presented with a variety of options, Choose "Create New Person".

Enter the required fields (name, title, etc.) and save.

Now you will be directed back to the user profile screen.

We will now create a user login. Click "Create New" link on the user name(s) screen in the right column

Enter the following details:

• User Login ID: joe.will
• Current Password: ofbiz
• Current Password verify: ofbiz

Now you will see the new user login on the profile screen under the "User Name(s)" area of the page.

Click on the "Security Group" link. You will be presented with a screen that allows you to add a security group to the user. This will allow you to set the permissions for that user. The permissions are classified as "View", "Create", "Update" and "Delete". An admin security group contains all of these permissions. Select the "Asset Maint Admin" group from the drop-down menu. The field for "From Date" is optional and if no value is entered, the application will use the system's timestamp. "Thru Date" is also optional, this allows you to select a time frame for the permissions if desired. You also have the option to assign multiple security groups to the same user. When done, click "save".

The user now has permission to access the "Asset Maint" application.

Note: The admin user is available only if demo data is installed. If only seed data is installed then you have to create the admin user through the command line with an ant target defined in the build file which is present at the root of the project. Run command create-admin-user-login from the terminal and follow onscreen instructions to complete this wizard.

Testing Permissions | OFBiz Tutorial

Logout of the party manager so you can login to the asset maint app. with the new user. If everything was filled out correctly there should be no problem with the login. Once successfully logged in, the user now has permission to "view" this application.

We will now test if the user has "create" permission. Go to the "Fixed Assets" tab and click on "New Fixed Asset". Fill in basic details and click "Update". If the user is able to create a new fixed asset record, they successfully have create permission.

You can check for "update" or "delete" permission by updating or deleting the mock fixed asset record you just created.

If you try to log into another application that doesn't have a permission set up under this user they will not have access.

This is an overview of user permissions. As you familiarize yourself with the interface you will be able to take advantage of the various permissions options available.

Enterprise eCommerce makes it very easy for you to update, inventory, manage and maintain your operation with full automation of many processes. OFBiz, once implemented can be easily updated and maintained and integrates with most other platforms that you will use (such as shipping and payment options). Taking advantage of OFBiz tutorials gives you an edge on the competition and streamlines your business. For more information on enterprise eCommerce and Apache OFBiz, contact HotWax Media at 888-405-2667.