| Автор |
Сообщение |
|
Сообщение создано: 23. 08. 2017 [19:26]
|
|
Unaie
Unai Ezta
Создатель темы
Зарегистрирован(а) с: 30.06.2009
Сообщения: 42
|
I have two users:
ROOT belonging to all groups.
USER belonging to groups UI,UIC,Users.
Operation User Interface (QT) is launched by USER automatically.
Project has permissions:
Owner and Group: ROOT UIC
View Control / View Control / View
When you login in Operation user interface (WEB) as user: USER, you can connect to current session (QT), but it is not allowed to create a new one. (ROOT is able to create a new one)
What I want is that via WEB the user always has to create a new session, and never to connect the existing QT session.
Do I have to create different users for remote WEB access to avoid connections to QT Session?
Another question, how can I disable via WEB for an user these options:
 System configurator (WEB)
 Web interface from user
 Dynamic WEB configurator
|
|
Сообщение создано: 23. 08. 2017 [22:06]
|
|
roman
Roman Savochenko
Moderator Contributor Developer
Зарегистрирован(а) с: 12.12.2007
Сообщения: 3742
|
"Unaie" wrote:
I have two users:
ROOT belonging to all groups.
There enough belonging to the group "root".
"Unaie" wrote:
When you login in Operation user interface (WEB) as user: USER, you can connect to current session (QT), but it is not allowed to create a new one. (ROOT is able to create a new one)
No, contrariwise. You cannot to connect to actual Qt session but it's from different user and USER isn't ROOT, see to Demo. Only ROOT can connect to sessions from different users!
"Unaie" wrote:
Another question, how can I disable via WEB for an user these options:
 System configurator (WEB)
 Web interface from user
 Dynamic WEB configurator
You can their disable only by client's IP or commonly but in time of the main page opening there unknowns any user yet!
Learn, learn and learn better than work, work and work.
|
|
Сообщение создано: 23. 08. 2017 [23:15]
|
|
Unaie
Unai Ezta
Создатель темы
Зарегистрирован(а) с: 30.06.2009
Сообщения: 42
|
"roman" wrote:
No, contrariwise. You cannot to connect to actual Qt session but it's from different user and USER isn't ROOT, see to Demo. Only ROOT can connect to sessions from different users!
OK, but USER launches QT GUI. So when USER logins via WEB, a previous session is open for that user, and he cannot create a new one to avoid interference with local SCADA. In old versions there was not this problem.
So, I think I have to create 2 users, USER_QT and USER_WEB. USER_QT opens QT Session, and USER_WEB has to create a new session. Am I Right?
"Roman" wrote:
You can their disable only by client's IP or commonly but in time of the main page opening there unknowns any user yet!
Correct. But I see that logged users, as USER, belonging to groups UI,UIC and Users can access via WEB to configuration options. Is there any of these groups giving configuring privileges?
[Сообщение редактировалось 1 раз(а), в последний раз 23.08.2017 в 23:16.]
|
|
Сообщение создано: 24. 08. 2017 [07:33]
|
|
roman
Roman Savochenko
Moderator Contributor Developer
Зарегистрирован(а) с: 12.12.2007
Сообщения: 3742
|
"Unaie" wrote:
"roman" wrote:
No, contrariwise. You cannot to connect to actual Qt session but it's from different user and USER isn't ROOT, see to Demo. Only ROOT can connect to sessions from different users!
OK, but USER launches QT GUI. So when USER logins via WEB, a previous session is open for that user, and he cannot create a new one to avoid interference with local SCADA. In old versions there was not this problem.
So, I think I have to create 2 users, USER_QT and USER_WEB. USER_QT opens QT Session, and USER_WEB has to create a new session. Am I Right?
Right, the generic users must be different ones anyway.
"Unaie" wrote:
"Roman" wrote:
You can their disable only by client's IP or commonly but in time of the main page opening there unknowns any user yet!
Correct. But I see that logged users, as USER, belonging to groups UI,UIC and Users can access via WEB to configuration options. Is there any of these groups giving configuring privileges?
Where? Can you do here http://oscada.org:10002/WebCfgD/ anything?
For external and runtime users you also must create and use exclusively new, not system, groups. But UI is one!
Learn, learn and learn better than work, work and work.
|
|
Сообщение создано: 25. 02. 2019 [09:31]
|
|
deghat
deghat kon
Зарегистрирован(а) с: 04.12.2018
Сообщения: 3
|
hi.
how can get user name that log in system from java-like language?
(user name that loin in web client or server)
thanks
|
|
Сообщение создано: 25. 02. 2019 [15:46]
|
|
roman
Roman Savochenko
Moderator Contributor Developer
Зарегистрирован(а) с: 12.12.2007
Сообщения: 3742
|
"deghat" wrote:
how can get user name that log in system from java-like language?
(user name that loin in web client or server)
By the proper function user( ), for the only user in the session, and the function reqUser( ) for last requested user, for multiple users at the one session: http://oscada.org/wiki/Special:MyLanguage/Documents/User_API#SYSUI
Or see to the messages log-archive for the logins history.
Learn, learn and learn better than work, work and work.
|
|
Сообщение создано: 27. 02. 2019 [07:40]
|
|
deghat
deghat kon
Зарегистрирован(а) с: 04.12.2018
Сообщения: 3
|
"roman" wrote:
"deghat" wrote:
how can get user name that log in system from java-like language?
(user name that loin in web client or server)
By the proper function user( ), for the only user in the session, and the function reqUser( ) for last requested user, for multiple users at the one session: http://oscada.org/wiki/Special:MyLanguage/Documents/User_API#SYSUI
Or see to the messages log-archive for the logins history.
Thanks, but when i write this code, with root user
SYS.messDebug(" user: ",""+SYS.UI.user());
or
SYS.messDebug(" user: ",""+SYS.UI.QTStarter.user());
Result get me value : 0
what is wrong?
Thanks alot
|
|
Сообщение создано: 27. 02. 2019 [08:37]
|
|
roman
Roman Savochenko
Moderator Contributor Developer
Зарегистрирован(а) с: 12.12.2007
Сообщения: 3742
|
"deghat" wrote:
Thanks, but when i write this code, with root user
SYS.messDebug(" user: ",""+SYS.UI.user());
or
SYS.messDebug(" user: ",""+SYS.UI.QTStarter.user());
Result get me value : 0
what is wrong?
These functions name space is not "SYS.UI" and that wrote in round brackets of the object name of the documentation section, obviously:
Object "Session" ( this.ownerSess() )
string user( ) — current session user.
int alrmQuietance( int quit_tmpl, string wpath = "", bool ret = false ) — quiets of the violations wpath with the template quit_tmpl. If wpath is empty string then the global
Learn, learn and learn better than work, work and work.
|
