user group

[Former Member]

Hy everybody.

I try to create a new group of users which can only see data of products. To do that I launch this impex:

 #Create Promoter Role
 INSERT_UPDATE BackofficeRole;UID[unique=true];locname[lang=en];backOfficeLoginDisabled;authorities
 ;promoterrole;Organization Employee Role;FALSE;promoterrole;
 
 INSERT_UPDATE UserGroup;uid[unique=true]
 ;promotergroup;
 
 INSERT_UPDATE PrincipalGroupRelation;source(uid)[unique=true];target(uid)[unique=true]
 ;promotergroup;promoterrole;
 
 $START_USERRIGHTS;;;;;;;;;
 Type;UID;MemberOfGroups;Password;Target;read;change;create;remove;change_perm
 UserGroup;promotergroup;;;;;;;;
 ;;;;Product;+;+;+;+;+
 $END_USERRIGHTS;;;;;;;;;

I create a promoter role, then a group, associate and add access to the group to only see Product. From backoffice I associate the Employee to the new group created (promotergroup). I don't know what I'm doing wrong because In backoffice (Hybris 6.7) I can acces product info but in the result list i can't see any data. What I'm trying to do is: create a new group and asociate users to that group but it can't be a admin role because I will launch an SearchRestriction impex and for admin rol restrictions are not executed.

I'm using an example and I don't know what I'm meassing.

[arvind-kumar_avinash]

Hi - you already have a BackofficeProductManager user (User: BackofficeProductManager, Password: 1234) who has access to just product catalog. Do you want to create a similar user or a different type of user? If you want a similar user, you can create a user and assign the same groups as of BackofficeProductManager. If you want to create restrictions for this user, you can do like https://answers.sap.com/questions/12770249/role-specific-categories-display-in-back-office-pr.html?c...

By the way, I just executed your ImpEx, created an employee (e.g. TestUser ), assigned the promotergroup to this employee, logged into backoffice with TestUser and I do not see the problem that you have shown.

So the only change you need to do in you ImpEx is to add a TestUser as mentioned below and then you can login with TestUser to test again.

 $START_USERRIGHTS;;;;;;;;;
 Type;UID;MemberOfGroups;Password;Target;read;change;create;remove;change_perm
 UserGroup;promotergroup;;;;;;;;
 Employee;TestUser;promotergroup;1234;;;;;;;
 ;;;;Product;+;+;+;+;-
 $END_USERRIGHTS;;;;;;;;;

Note: I have also changed the change_perm permission to -. You can keep it as + as per your requirement.

[Former Member]

Hi
What I want to do It's something similar. I used Product as an example I have a new entry in in my explorer tree with a new entity. I want to use restrictions (you told me about that in another post - will do that) so If a user wants to se data of my new entity depending of the group that user belongs will see different data. But I create the group, associate the user to that group and give permission on my entity to read and write but when he access from explorer tree all data is "not readable". It's my first group/role creation and I don't know what I'm meassing.