back office roles vs hac roles

[Former Member]

Hello,

HAC roles are in the spring-security-config.xml file and this file has all the roles for each hac tab.

For example - By looking at the above file to give access to platform -->update I need to give role as "ROLE_HAC_PLATFORM_UPDATE"

I think back office works differently. In back office let say I want to give access to marketing node only to specific user then how do I know what role I need to assign?

In simple words how does the admin person knows what roles need to assign (to access specific nodes like marketing, order etc.) to a user when the user is created in back office?

What file has all the roles for back office? For HAC all the roles are in spring-security-config.xml file.

Thanks in advance.

[Former Member]

Hi SasiReddy,

BackofficeRole extends UserRole and as such is stored in the database. To see all of them you can use following Flexible Query:

 SELECT * 
 FROM {BackofficeRole as br}

Unfortunately they are not introduced in a single configuration file. Each extension can add it's own roles and they can also be added by admin. (for example see: warehousingbackoffice/resources/impex/essentialdata-warehousing-roles.impex).

As for which role is needed for specific UI component - you can find it in relevant configuration file (backoffice-config.xml and backoffice-widgets.xml).
For example: open orchestrator mode -> Show cockpit-config.xml -> show filter options -> using those options find desired UI configuration -> check the principal attribute which will be the BackofficeRole you are looking for.

Hope this helps.
Best Regards,