1. Introduction to OFBiz and OFBiz Security

2. Objectives Understand how the simulation is set up
See how to navigate through the OFBiz applications
Understand role-based security
Review selected OFBiz organizational units

3. Navigation (Introduction)
It’s a hierarchical menu system based on functional applications
The levels of menus varies based on the application

4. Navigation (Applications)
AP / AP ACCOUNTING
CATALOG to manage customer catalogs
CONTENT to manage catalog content
FACILITY to keep track of inventory
ORDER to work with purchase and sales orders
PARTY manger keeps track of users
WEB TOOLS provides access to the OFBiz application itself

5. Security (Introduction)
All ERPs support some form of role-based security
In general
Users have credentials
Users get permission to parts of the system based on their job function
SAP and OFBiz work similarly
I’ll take a bottom-up approach to describing the system

6. Security (Diagram 1)

7. Security (Diagram 2)

8. Security (Implementation)
The lowest level of permission is the SecurityPermission
These security permissions map to the OFBiz code

9. Security (Implementation)
SecurityGroupPermission assembles permissions together in a group

10. Security (Implementation)
The SecurityGroup entity lists the unique security groups

11. Security (Implementation)
A user has a login and password stored in the UserLogin entity
It’s common to store passwords as an SHA hash

12. Security (Implementation)
The UserLoginSecurityGroup entity maps the UserLogin to the assigned SecurityGroup(s)

13. Creating a User Users are just a type of party
OFBiz contains some predefined party types
These are use to create assign parties to particular roles

14. Party (Personal Information)
A party (user) has limited personal information
This information can be changed

15. Party (Contact Information)
We can communicate with a party in many ways
, physical address, telephone, Web, etc..
So a party can have several contact entries

16. Party (Payment Information)
We have not worked with this yet, but payment types can be configured for customers and suppliers

17. Party (Other) We can creates notes about the party
We can look at visit history for the party
Customers are typically associated with a store where they buy goods