Use Server Side Permission Restrictions

You use the Permission Restrictions section of the Server Configuration Tool as a means of restricting access to the system on a per server basis. You can then restrict access to other features and/or database items on a per User Group, or individual User, basis, if required.

You use the Permission Restrictions settings to deny certain permissions at one of four different levels:

• Server Denied Permissions—To deny access to features from every ViewX or Virtual ViewX client that is connected to the server. The settings also apply to other types of client that are connected to the server, such as OPC or ODBC clients, or the Automation Interface.
• ViewX User Denied Permissions—To deny access to features from every ViewX client that is connected to the server.
• WebX/Operator ViewX User Denied Permissions—To deny access to features from:
  • Original WebX clients that are connected to the server
  • Virtual ViewX (the newer web server hosted using IIS), if the IIS server connects to this Geo SCADA Expert server to access the Geo SCADA Expert database.
• Standard Pick Menu Denied Permissions—To deny access to specific options on the standard context-sensitive pick action menus that are available on ViewX and Virtual ViewX clients that are connected to the server. (The pick action menus are also referred to as 'Object menus'.)

By restricting access to permissions on a server-wide basis in this way, you can make your system more secure by limiting which features are available to clients that connect to Geo SCADA Expert via specific server(s).

To use the server side permission restrictions effectively, you need to consider the working procedures of your operators, engineers and administrators. Taking into account their expected duties, you can restrict their access so that when they log on they can only access the features they need.

By default on new installations, four permissions are restricted via the Server Denied Permissions section of the tool (Unacknowledge Alarms, Assign Alarm Responsibility, Off/On Scan, and Cancel Request). Depending on the role of the installed server, these and other restrictions may, or may not, be appropriate. We recommend that you assess which permission restrictions are appropriate for each server, based on its role in your system and the system's operational requirements, and then configure the required restrictions accordingly. For example, it is likely that you may want to remove the 'Cancel Request' restriction from those servers that might go Main, but leave it in place for Permanent Standby servers.

For more information on configuring the server side permission restrictions, see Define Whether any Permissions are Restricted. For information about the permissions themselves, see Permissions for Database Items.