csmstr - Omega Engineering

USING THE SECURITY SYSTEM
SECURITY BASICS
USING THE SECURITY SYSTEM
Crimson contains powerful features to allow you to define which operators have access to
which display pages, and limit those operators who are able to make changes to sensitive
data. The software also contains a security logging facility that can be used to record changes
to data values indicating when the change occurred, and by whom it was performed.
SECURITY BASICS
The follow sections details some of the basic concepts used by the security system.
OBJECT-BASED SECURITY
Crimson’s security system is object-based. This means that security characteristics are applied
to a display page or to a tag, and not to the user interface element that accesses the page or
makes a change to the tag. The alternative subject-based approach typically means that you
have to be careful to apply security settings to every single user interface element that might
change restricted data. Crimson’s approach avoids this duplication and ensures that once you
have decided to protect a tag, it will remain protected throughout your database.
NAMED USERS
Crimson supports the ability to create any number of users, each of whom will have a
username, a real name and a password. The username is a case-insensitive string with no
embedded spaces that is used to identify the user when logging on, while the real name is
typically a longer string that is used within logon files to record the human-readable identity
of the user making a change. Note that you are free to use these fields in other ways if it suits
your application: You may, for example, create users that represent groups of individuals or
perhaps roles, such as Operators, Supervisors and Managers. You may also decide to use the
real name to hold an item such as a clock number to tie user identities into your MRP system.
USER RIGHTS
Each user is granted zero or more access rights. A user with no rights can access those objects
that merely require the identity of the user to be recorded, whereas users with more rights can
REVISION 6 PAGE 255