Access to add and change pages is restricted. See: https://cwiki.apache.org/confluence/display/OFBIZ/Wiki+access

Access Control Scenario Six

Scenario Description

User X can use any artifact for any record (ie superuser).

Current Implementation Example

The OFBiz demo data includes an admin user, who is a member of two security groups. The two groups include 71 permissions.

New Design Implementation Example

This description includes permission expressions that are in the form of ArtifactIdentifier[PermissionsList]. The expressions are illustrative - they are not intended to be some kind of "permission string." How permissions are stored and managed depends upon the Authorization Manager implementation.

The admin user is assigned one permission: OFBiz[admin=true].

  • No labels