EPICS Controls Argonne National Laboratory

Experimental Physics and
Industrial Control System

1994  1995  1996  1997  1998  1999  2000  2001  2002  2003  2004  2005  2006  2007  2008  <20092010  2011  2012  2013  2014  2015  2016  2017  2018  2019  2020  2021  2022  2023  2024  Index 1994  1995  1996  1997  1998  1999  2000  2001  2002  2003  2004  2005  2006  2007  2008  <20092010  2011  2012  2013  2014  2015  2016  2017  2018  2019  2020  2021  2022  2023  2024 
<== Date ==> <== Thread ==>

Subject: RE: Access security problem
From: "GOURNAY Jean-Francois" <[email protected]>
To: <[email protected]>
Date: Wed, 9 Sep 2009 14:34:52 +0200

Thanks to Martin and Andy for their help and useful explanations concerning the use of RULE( 0 | 1 …

I did more systematic tests and I have this strange situation:

 

ASGVAL          UAG                 user spiral2       user spiral2mgr             user gournay

 

1                      tous                 W                    W                                W                                OK

2                      develop             -                       - (should be W)             -                                  WRONG

4                      physique           W                     -                                  -                                  OK

8                      gournay            -                       W (should be -)             W                                WRONG

 

W : database WRITE access

-  :  no write access

 

I modified the CALC expressions accordingly to Martin suggestion : CALC("A&1") instead of CALC("A&1=1").  But I don’t think I have to write CALC (A>0&&A<2) as my A value comes from a longout record.

 

J.F. Gournay

CEA Saclay

IRFU/SIS


De : GOURNAY Jean-Francois
Envoyé : mardi 8 septembre 2009 15:52
À : [email protected]
Cc : [email protected]
Objet : TR: Access security problem

 

This message sent yesterday didn’t show up.

 

Hello

 

I try the following ASG configuration file:

 

UAG(tous) {spiral2, spiral2mgr, gournay}

UAG(physique) {spiral2}

UAG(develop) {spiral2mgr}

UAG(gournay) {gournay}

HAG(hag) {dappck110}

ASG(DEFAULT) {

      INPA(ASGVAL)

      RULE(1,READ)

      RULE(1,WRITE) {

            UAG(tous)

            HAG(hag)

            CALC("A&1=1")

      }

     

      RULE(1,WRITE) {

            UAG(develop)

            HAG(hag)

            CALC("A>>1=1")

      }

      RULE(1,WRITE) {

            UAG(physique)

            HAG(hag)

            CALC("A>>2=1")

      }

 

      RULE(1,WRITE) {

            UAG(gournay)

            HAG(hag)

            CALC("A>>3=1")   

            }    

}

 

The idea is to change WRITE permission depending on the value of a longout record ASGVAL (ASGVAL.VAL = 1,2,4,8)

It doesn’t work: for A=1 the 3 users defined in “tous”  have WRITE access whatever UAG. For A != 1 no WRITE access at all. As I am in ASG DEFAULT, I did’nt specify anything for the ASG Fields in the database.

What is wrong in this scheme?

 

Another point: I did’nt really understand the meaning of RULE(1 … vs RULE(0 …

Thanks!

 

J.F. Gournay

CEA Saclay

IRFU/SIS

 


Replies:
Re: Access security problem Andrew Johnson
References:
TR: Access security problem GOURNAY Jean-Francois

Navigate by Date:
Prev: Re: sequencer feature request Dirk Zimoch
Next: Re: sequencer feature request Eric Norum
Index: 1994  1995  1996  1997  1998  1999  2000  2001  2002  2003  2004  2005  2006  2007  2008  <20092010  2011  2012  2013  2014  2015  2016  2017  2018  2019  2020  2021  2022  2023  2024 
Navigate by Thread:
Prev: Re: TR: Access security problem Martin L. Smith
Next: Re: Access security problem Andrew Johnson
Index: 1994  1995  1996  1997  1998  1999  2000  2001  2002  2003  2004  2005  2006  2007  2008  <20092010  2011  2012  2013  2014  2015  2016  2017  2018  2019  2020  2021  2022  2023  2024 
ANJ, 31 Jan 2014 Valid HTML 4.01! · Home · News · About · Base · Modules · Extensions · Distributions · Download ·
· Search · EPICS V4 · IRMIS · Talk · Bugs · Documents · Links · Licensing ·