user group vs backoffice role

[Former Member]

Hello,

Could any one help what is the user of backoffice role?

I can create user group and restricts the access that whatever I want. I can do the same thing with back office role also. I am not getting clear difference or the purpose of backoffice role.

I read this document but still not clear..

https://help.hybris.com/6.7.0/hcd/8b6f8af58669101495a7aa8620585384.html

Thanks in advance.

[Former Member]

Thanks for your response Jacek.

[Former Member]

I am looking OOTB code for the rules. For example - warehousingbackoffice-backoffice-config.xml file has role called "warehouseadministratorrole" and this role is not exists in the usergroups. I thought all the roles used in the OOTB code is already exists in usergroups.

Please see the scree shot..

[former_member625836]

It is possible that you haven't imported some project data or removed existing one (this particular role is a part of warehousingbackoffice essential data). Please check if everything is in place. Also bear in mind that BackofficeRoles are just entities in database - they may be removed, updated and added easily by administrator - you may always add them by your own.

[Former Member]

Thanks you for ur quick response. Are you saying we can't use user groups to restrict the back office UI (for example - marketing node I can restrict / give access by creating the user group)?

Instead of usergroups do we need to use backoffice role?

I see many out of the box roles of type user group and they are using to restrict the UI. The best example is marketingManagerGroup and this group allowing access to Marketing node . This group is not of type back office role.

[former_member625836]

I've updated my answer - please take a look now.

[former_member625836]

Hi ,

A BackofficeRole is an extension of UserGroup that is meant to be used for restricting access in Backoffice (i.e. UI configuration context defines an dimension called principal which actually work exactly on BackofficeRoles). It also introduces an attribute called authorities which extends restriction possibilities (i.e. widget access may be restricted only to specified authorities) - user may use only one role at the moment, but different roles may have same authorities.

You cannot use simple UserGroup then - it will not be respected by Backoffice.

Below you may find examples of restriction capabilities:

 <context type="Product" component="myComponent" principal="user1">
     ...
 </context>
 <context type="Product" component="myComponent" principal="backofficeRole1">
     ...
 </context>
 <widget id="someWidget" widgetDefinitionId="com.hybris.someWidget"
 access="backofficeRole1" />
 <widget id="someWidget" widgetDefinitionId="com.hybris.someWidget"
 access="authority1" />

Cheers, Jacek