I have rerad the entire thread and must say, given that we at ORRTIZ.com mainly do multi-tenancy, that having a page stating a userID and password is an unwanted aspect.
Per tenant we create a new superuserId and associated password the moment we instantiate it. But that is our personal approach to ensure to ensure that mistakes are minimized. And when logged in we always show the delegator of the tenant. Therefore, I am not overly fond of keeping it. Everybody who starts out with OFBiz knows there is documentation (where explanation about the starting userid and password and how to change it should be described) and should know how to access the various apps in the feature set. While having an explanation about what the webtools app delivers and should be used for in the starting page of webtools is good, having a userId and password there is superfluous and potentially misleading and/or dangerous (from a security perspective). Having the uniform login mechanism and screens (across all apps) has advantages like consistency in UI and low maintenance aspects. All in all my favourite. Regards, Pierre Smits *ORRTIZ.COM <http://www.orrtiz.com>* Services & Solutions for Cloud- Based Manufacturing, Professional Services and Retail & Trade http://www.orrtiz.com On Mon, Feb 24, 2014 at 6:01 PM, Jacques Le Roux < [email protected]> wrote: > Hi, > > This has been already discussed in OFBIZ-2103 > > Then David explained why we should keep the different login screen in > webtools. > https://issues.apache.org/jira/browse/OFBIZ-2103?focusedCommentId=12660444 > > I'm personally neutral on this because it's only a matter of changing the > auth from false to true for the "main" request-map. > But there are some users who find it annoying. > > As last comment in the Jira issue, Bilgin suggested that this was maybe > not the best place for these explanations. > > So here are more brainstorming questions. > Should we keep it as is? > Should we simply remove this webtools specific feature and explain things > somewhere else (not necessarily in an OFBiz internal a web page)? > Should we create an OFBiz internal specific web page for it, as suggested > Bilgin then? > > Jacques > > >
