i4designer Knowledgebase

i4designer Security settings tutorials

Abstract

These tutorials will guide you through managing your i4designer projects and applying a set of security settings. Check these easy step-based tutorials here.

The i4designer software allows the user to apply security to their projects as follows:

  • by means of the Security components

    • User login

    • User information

    • User authorizations list

  • by means of the Security properties:

    • System authorization

      Tip

      For more details about the i4SCADA User manager System authorizations, please also read this article.Managing Authorization Groups

    • Project authorization

      Tip

      For more details about the i4SCADA user Manager Project authorizations, please also read this article.Managing Project Authorizations

    • Security access behavior

The upcoming tutorials will not only guide you through the basic steps required to apply security to your projects, but will also explain the interaction between the security components and the security properties.

Setting up a project using i4SCADA Studio security
Abstract

If you are an i4SCADA user and you are trying to reuse some of the Studio settings when building an i4designer project, please check out this step-based tutorial.

Using the advantages provided by the i4designer User login component and the security properties of other components, we will design an i4SCADA platform project, capable to extract its security from a predefined i4SCADA Studio database.

Note

For this tutorial we will use the i4SCADA Demo Project, having the following User Management settings:

  • "Admin", a Full rights User, being part of:

    • "Administration" Project authorization

    • having all the available System authorizations assigned.

  • "Guest" a Limited rights User, being part of:

    • "Guest" Project authorization

    • having only a few System authorizations assigned, allowing the user with login and operator rights.

The upcoming sections describe two of the most common outcomes, when using the i4designer security settings.

Login as Admin user (Full rights)

The first tutorial will demonstrate the options provided by the security components and settings in order to allow a complete project visualisation only to those users having the necessary permissions set.

  1. Log into the i4designer application.

  2. Using the Control Center Project management panel, open your i4SCADA Platform project.

  3. Open the i4designer Toolbox panel and add the following components to your project:

    project_at_design_time.jpg
    1. the User login component

    2. the Signal control component

    3. the Switch 3 States component

    Note

    We will leave the User login component, with its default settings, but you can organise further changes at any point.

  4. Double click the Signal control component on the design area to open the Properties panel.

  5. Go to the Security properties of the component and organise the following settings:

    Security_settings.jpg
    1. Add to the Project authorisation property the "Administration" value.

    2. Set the Security access behavior to "Hide".

  6. Make sure that your changes are saved, by following up the page visual cue.

    visual_cue.jpg
  7. Double click the Switch 3 States component on the design area to open the Properties panel.

  8. Go to the Security properties of the component and organise the following settings:

    Security_settings_2.jpg
    1. Add to the Project authorisation property the "Administration" value.

    2. Set the Security access behavior to "Disable

  9. Build and publish your i4designer project, on the machine running your i4SCADA installation. If you are having troubles with this step, please also visit our i4SCADA platform deployments tutorials.

  10. Open the run-time project. The Login component is visible, as well as the Switch 3 States. However, you can notice that the Switch 3 States component is visible, but actions for it are disabled.

    No_Login.jpg
  11. Login as "Admin" user.

  12. As the "Admin" user has the appropriate authorisation, the Signal control component becomes visible after login and actions of the Switch 3 States component are also possible.

    Logged_in_as_Admin.jpg
Login as Guest user (Limited rights)

The second tutorial concentrates of the limits that an unauthorised user has, when visualising a properly secured i4designer project.

  1. Log into the i4designeri4designer application.

  2. Using the Control Center Project management panel, open your i4SCADA Platform project.

  3. Open the i4designer Toolbox panel and add the following components to your project:

    project_at_design_time.jpg
    1. the User login component

    2. the Signal control component

    3. the Switch 3 States component

    Note

    We will leave the User login component, with its default settings, but you can organise further changes at any point.

  4. Double click the Signal control component on the design area to open the Properties panel.

  5. Go to the Security properties of the component and organise the following settings:

    Security_settings.jpg
    1. Add to the Project authorisation property the "Administration" value.

    2. Set the Security access behavior to "Hide".

  6. Make sure that your changes are saved, by following up the page visual cue.

    visual_cue.jpg
  7. Double click the Switch 3 States component on the design area to open the Properties panel.

  8. Go to the Security properties of the component and organise the following settings:

    Security_settings_2.jpg
    1. Add to the Project authorisation property the "Administration" value.

    2. Set the Security access behavior to "Disable

  9. Build and publish your i4designer project, on the machine running your i4SCADA installation. If you are having troubles with this step, please also visit our i4SCADA platform deployments tutorials.

  10. Open the run-time project. The Login component is visible, as well as the Switch 3 States. Further on, the Switch 3 States component is visible, but actions for it are disabled, while the Signal control component is completely hidden.

    No_Login.jpg
  11. Login as "Guest" user;

  12. As the "Guest" user does not have the appropriate authorization, the Signal control component is not visible, even after login.

    Logged_in_as_Guest.jpg
Setting up a project using i4connected security
Abstract

Check out this step based tutorials in order to learn how to secure components on your i4connected platform projects.

Using the advantages provided by i4designer and the Components Security properties available, we will design an i4connected platform project, capable to extract its security from an i4connected environment.

Note

For this tutorial we will build a simple i4designer project and publish it to a publicly available i4connected environment.

At i4connected end, the actors involved in this demonstration are:

  • User Admin - a superadministrator of the system

    • Role Administrator is assigned

    • Role Admin has Configure security permission enabled.

  • User User1 - a limited rights user

    • Role Administrator is NOT assigned.

    • Roles PlayRole and PortalUserRole are assigned.

    • None of the user's roles have Configure security permission enabled.

The upcoming sections describe some of the most common scenarios, when using the security settings of an i4connected platform project:

Hiding a component if User's Role doesn't match

This tutorial demonstrates how to completely hide a component, from an i4connected visualization, for all the users that do not have the appropriate Role assigned:

  1. Log into the i4designer application.

  2. Using the Control Center Project management panel, open an i4connected platform project.

  3. Open the i4designer Toolbox panel and add the following components to your project:

    Components_of_page.jpg
    1. the Signal control component

    2. the Switch 3 States component

  4. Double click the Switch 3 States component on the design area to open the Properties panel.

  5. Go to the Security properties of the component and organise the following settings:

    Role_and_Hide.jpg
    1. Add to the Roles property the "Administrator" value.

    2. Set the Security access behavior to "Hide".

  6. Make sure that your changes are saved, by following up the page visual cue.

    visual_cue.jpg
  7. The Switch 3 States component will be hidden at design-time, as well.

    Comp_is_hidden.jpg
  8. After configuring the i4connected Application mapping, build and publish your i4designer project on a publicly available i4connected environment. If you are having troubles with this step, please also visit our i4connected platform deployments tutorials.

  9. Log into the i4connected platform as Admin user. Open the visualization and check it.

    Both components are visible and the Admin user can interact with the Switch 3 States, as the user has the Administrator Role assigned.

    Comps_are_visible.jpg
  10. Next, log into the i4connected platform as User1. Open the visualization and check it.

    The Signal control component is visible, but the Switch 3 States is completely hidden, as the user does NOT have the Administrator Role assigned.

    Switch_is_hidden.jpg
Hiding a component if User's Permissions set doesn't match

This tutorial demonstrates how to completely hide a component, from an i4connected visualization, for all the users that do not have the appropriate permissions set, regardless if the Role matches:

  1. Log into the i4designer application.

  2. Using the Control Center Project management panel, open an i4connected platform project.

  3. Open the i4designer Toolbox panel and add the following components to your project:

    Components_of_page.jpg
    1. the Signal control component

    2. the Switch 3 States component

  4. Double click the Switch 3 States component on the design area to open the Properties panel.

  5. Go to the Security properties of the component and organise the following settings:

    Security_to_hide.jpg
    1. Add to the Permissions property the "Administrator" value.

    2. Add to the Roles property the "Configure security" value.

    3. Set the Security access behavior to "Hide".

  6. Make sure that your changes are saved, by following up the page visual cue.

    visual_cue.jpg
  7. The Switch 3 States component will be hidden at design-time, as well.

    Comp_is_hidden_2.jpg
  8. After configuring the i4connected Application mapping, build and publish your i4designer project on a publicly available i4connected environment. If you are having troubles with this step, please also visit our i4connected platform deployments tutorials.

  9. Log into the i4connected platform as Admin user. Open the visualization and check it.

    Both components are visible and the Admin user can interact with the Switch 3 States, as the user has the Configure security permission assigned.

    Comps_are_visible.jpg
  10. Next, log into the i4connected platform as User1. Open the visualization and check it.

    The Signal control component is visible, but the Switch 3 States is completely hidden, even though the user has the PlayRole assigned. The user does NOT meet the requirements as the Configure security Permission is not assigned.

    Switch_is_hidden.jpg
Disabling a component if User's Role doesn't match

This tutorial demonstrates how to disable a component, from an i4connected visualization, for all the users that do not have the appropriate Role assigned:

  1. Log into the i4designer application.

  2. Using the Control Center Project management panel, open an i4connected platform project.

  3. Open the i4designer Toolbox panel and add the following components to your project:

    Components_of_page.jpg
    1. the Signal control component

    2. the Switch 3 States component

  4. Double click the Switch 3 States component on the design area to open the Properties panel.

  5. Go to the Security properties of the component and organise the following settings:

    Security_disabled.jpg
    1. Add to the Roles property the "Administrator" value.

    2. Set the Security access behavior to "Disable".

  6. Make sure that your changes are saved, by following up the page visual cue.

    visual_cue.jpg
  7. The Switch 3 States component will be hidden at design-time, as well.

    Disabled_comp.jpg
  8. After configuring the i4connected Application mapping, build and publish your i4designer project on a publicly available i4connected environment. If you are having troubles with this step, please also visit our i4connected platform deployments tutorials.

  9. Log into the i4connected platform as Admin user. Open the visualization and check it.

    Both components are visible and the Admin user can interact with the Switch 3 States, as the user has the Administrator Role assigned.

    Comps_are_visible.jpg
  10. Next, log into the i4connected platform as User1. Open the visualization and check it.

    Both components are visible, but the Switch 3 States is disabled and the user cannot interact with it, as the user does NOT have the Administrator Role assigned.

    Swicth_disabled.jpg
Disabling a component if User's Permissions set doesn't match

This tutorial demonstrates how to disable a component, from an i4connected visualization, for all the users that do not have the appropriate permissions set, regardless if the Role matches:

  1. Log into the i4designer application.

  2. Using the Control Center Project management panel, open an i4connected platform project.

  3. Open the i4designer Toolbox panel and add the following components to your project:

    Components_of_page.jpg
    1. the Signal control component

    2. the Switch 3 States component

  4. Double click the Switch 3 States component on the design area to open the Properties panel.

  5. Go to the Security properties of the component and organise the following settings:

    Security_disabled.jpg
    1. Add to the Roles property the "PlayRole" value.

    2. Add to the Permissions property the "Configure security" value.

    3. Set the Security access behavior to "Disable".

  6. Make sure that your changes are saved, by following up the page visual cue.

    visual_cue.jpg
  7. The Switch 3 States component will be hidden at design-time, as well.

    Switch_disabled_2.jpg
  8. After configuring the i4connected Application mapping, build and publish your i4designer project on a publicly available i4connected environment. If you are having troubles with this step, please also visit our i4connected platform deployments tutorials.

  9. Log into the i4connected platform as Admin user. Open the visualization and check it.

    Both components are visible and the Admin user can interact with the Switch 3 States, as the user has the Configure security permission assigned.

    Comps_are_visible.jpg
  10. Next, log into the i4connected platform as User1. Open the visualization and check it.

    Both components are visible, but the Switch 3 States is disabled and the user cannot interact with it, as the user does NOT have the Configure security permission assigned.

    Swicth_disabled.jpg