Web / Apache OFBiz Interview questions
What are Security Groups and Security Permissions in OFBiz?
OFBiz's security model has two layers. A Security Permission is a named right, like ORDERMGR_ADMIN or CATALOG_VIEW, checked before an action is allowed.
A Security Group is a named bundle of permissions - FULLADMIN, for example, grants every permission in the system. Users get access by being assigned, through UserLoginSecurityGroup, to one or more groups rather than getting permissions individually.
This indirection means you manage access by adjusting group membership and group-to-permission mappings, instead of editing permission checks scattered across the codebase every time a role changes.
A named right such as ORDERMGR_ADMIN is called a:
Users are granted access to permission bundles via which entity?
More Related questions...
