Hi, I am very new to OFbiz (discovered it very recently). It is a treasure trove. :-)
Have been dabbling with it for a brief while now and looking to learn more about security and access control. I am trying to work out a multi-organization hosted model scenario and as such would like to limit all users to their party related data only. For example an order Entry for a user 'User A' for Company 'A' should not be visible to 'userB' for 'CompanyB'. Exceptions could be if 'CompanyB' is the customer for the order, in which case 'userB' should be able to see the same. I played around with some examples but couldn't get this kind of control.. All orders created seem to be visible to ALL. Going through some of the documentation I found some reference to control based on Party. http://ofbizwiki.go-integral.com/Wiki.jsp?page=SecurityAdministration The above link seems to suggest Category #2 (Party-driven) as a feature, but can't figure out how it works.. Would really appreciate if anyone has any inputs. Thanks Sandeep PS: Just started looking at SharedOFBiz to see if that throws up something.
