Scalable PLC AC500 AC500 Control Builder Plus User & Access Rights Management

Transcription

1 3ADR023030N0201 Scalable PLC AC500 AC500 Control Builder Plus User & Access Rights Management

2 CBP User & Access Rights Management Contents User Management (Concept and Mechanism) Access Right Management User Management Commands Project Settings Users & Groups Users Management, Groups Management Settings Dialogs Logon / Logoff / Permissions Additional Protection (CBP/CoDeSys) June 14, 2013 Slide 2

3 CBP User & Access Rights Management Contents User Management (Concept and Mechanism) Access Right Management User Management Commands Project Settings Users & Groups Users Management, Groups Management Settings Dialogs Logon / Logoff / Permissions Additional Protection (CBP/CoDeSys) June 14, 2013 Slide 3

4 User Management What does it mean? The User Management provides functions for defining User Accounts and configures the Access Rights within a project The Rights to access project objects via specified actions are assigned only to User Groups, not to a single User The configuration of Users and Groups is done via Project / Project Settings menu Each User must be member of a Group Each project has got its own User Management Attention: The User Passwords are stored irreversibly June 14, 2013 Slide 4

5 CBP User & Access Rights Management Contents User Management (Concept and Mechanism) Access Right Management User Management Commands Project Settings Users & Groups Users Management, Groups Management Settings Dialogs Logon / Logoff / Permissions Additional Protection (CBP/CoDeSys) June 14, 2013 Slide 5

6 Access Right Management Mechanism User Management in project is only useful in combination with the Access Right Management In a new project, all Rights are not yet defined, but set to a default value = Granted Each Rights can be defined as Granted Denied or set back to default value The data of Access Right Management of project is accessible via Project / User Management / Permission Access Rights on objects come from heritage, if an object has a father object, the current rights of the father will automatically be the default value of the child June 14, 2013 Slide 6

7 CBP User & Access Rights Management Contents User Management (Concept and Mechanism) Access Right Management User Management Commands Project Settings Users & Groups Users Management, Groups Management Settings Dialogs Logon / Logoff / Permissions Additional Protection (CBP/CoDeSys) June 14, 2013 Slide 7

8 User Management Commands Using an User Interface plug-in The user management plug-in provides commands to realize Configuration of Access Rights on the project objects Logon or Logoff the project via a defined User Account These commands are accessible via Project / User Management June 14, 2013 Slide 8

9 CBP User & Access Rights Management Contents User Management (Concept and Mechanism) Access Right Management User Management Commands Project Settings Users & Groups Users Management, Groups Management Settings Dialogs Logon / Logoff / Permissions Additional Protection (CBP/CoDeSys) June 14, 2013 Slide 9

10 Project Settings Users & Groups Access and Creation Use the Project / Project Settings / Users and groups menu The dialog box provides three submenus for the current project, to create and manage Users, Groups and define Settings There are always automatically two groups Owner and Everyone and one default user Owner with empty password June 14, 2013 Slide 10

11 Project Settings Users & Groups Users Management The currently registered Users are listed in a tree structure Use a button Add to create a new user or Edit to display or modify the user data The Ownerships of each user can be displayed using a tree navigation Each new user per default is member of group Everyone June 14, 2013 Slide 11

12 Project Settings Users & Groups Add or Edit Users In the Add or Edit User window, fill the different fields to define user data Logon Name for the user Full Name (Option) Description (Option) Password (masked by * ) Active, to valid the user account Memberships, list of all currently existing user groups, select in which groups the user should belong to June 14, 2013 Slide 12

13 Project Settings Users & Groups Groups Management The currently registered Groups are listed in a tree structure Use a button Add to create a new group or Edit to display or modify the group data The Members of each group can be displayed using a tree navigation A Group can be also member to another group June 14, 2013 Slide 13

14 Project Settings Users & Groups Add or Edit Groups In the Add or Edit Group window, fill in the different fields to define group data Name for the group Description (Option) Members, list of all currently existing users and groups, select those ones which should be members of group June 14, 2013 Slide 14

15 Project Settings Users & Groups Settings management Basic options and settings concern the all user accounts: Maximum number of authentication trials If selected, user account will be invalid after the specified number of trials with wrong password If not selected, the number of wrong trials is unlimited Automatically logoff after time of inactivity If selected, user account will be logged out automatically after the specified number of minutes (without user actions) June 14, 2013 Slide 15

16 User Management Commands User Logon Command For logging, use the command via Project / User Management / User Logon Select the project and enter User name and Password of valid user account This action means to log on with those object access rights which are granted to the group of which the user belong to After logging, in right corner of bottom of screen, a status bar displays which user currently is logged on the project June 14, 2013 Slide 16

17 User Management Commands User Logoff Command To log off, use the command via Project / User Management / User Logoff If User had been logged on to the currently project and if the command User Logoff is executed, the system will switch automatically to current user: (nobody) If no User had been logged on to the currently project the following message will appear June 14, 2013 Slide 17

18 User Management Commands User Permissions command (1) To configure the rights to work on objects or/and perform commands in the current project, use the command via Project / User Management / User Permissions Permissions are granted or denied by Groups, and the Users who belong to a group will be able to perform all the permitted actions Any changes made will be applied immediately Possible actions: Execute (execution of a menu command) Create (creating a new object in the current project) Add/Remove children (adding/removing objects to an existing object) Modify (editing an object in an editor) Remove (deleting/cutting an object) View (viewing an object in an editor) June 14, 2013 Slide 18

19 User Management Commands User Permissions command (2) The Action displays all possible rights which can be performed on any object of the current project The Permission provides a list of all available user groups and toolbar for configuring rights June 14, 2013 Slide 19

20 User Management Commands User Permissions command (3) If a user tries to perform an action for which he has no right, the following Logon window will be opened, to switch to another user account For information, all groups which are provided with the necessary rights for the desired action are shown June 14, 2013 Slide 20

21 CBP User & Access Rights Management Contents User Management (Concept and Mechanism) Access Right Management User Management Commands Project Settings Users & Groups Users Management, Groups Management Settings Dialogs Logon / Logoff / Permissions Additional Protection (CBP/CoDeSys) June 14, 2013 Slide 21

22 Additional Protection Encryption password in CBP Use the Project / Project Settings / Security menu Need to enter the password which it has been defined to open and access of project June 14, 2013 Slide 22

23 Additional Protection Password in CoDeSys Read / Write Protection Use the Project / Options / Passwords menu Protect the CoDeSys file against the modification (Write protection) Protect the CoDeSys access from unauthorized access (Read protection) June 14, 2013 Slide 23

24 Additional Protection Password in CoDeSys Read / Write Protection If previously a password has been defined in CoDeSys CoDeSys will be opened and accessible only if the correct password is entered June 14, 2013 Slide 24

25 Additional Protection Password in CoDeSys User Groups Use the Project / User Group Passwords menu In CoDeSys up to 8 user groups with different access rights to the objects After definition of user groups and passwords, you need to use the Object Access rights for assigning them to the different user groups June 14, 2013 Slide 25

26 Additional Protection Password in CoDeSys User Group If previously user groups and password have been defined in CoDeSys CoDeSys will be opened and accessible only if the correct user group and his password are entered June 14, 2013 Slide 26

27 Additional Protection Password for AC500 CPU Using a PLC Browser command setpwd, it is possible to set a password for AC500 CPU Without the correct password, no connection to CPU can be established. Unlimited attempts are allowed Use a PLC Browser command delpwd to remove password June 14, 2013 Slide 27

28 June 14, 2013 Slide 28