Designer and Gateway Protection

Ignition
1

Hi,

I would like to protect the project with below constraints (whereas I have two usersources : default, AD)

image
image778×120 5 KB

I have given the below setting, still not worked as expected,
image
image1134×875 53.5 KB

2

This is incomprehensibly vague. Please elaborate what you mean by "not worked". Errors? Total login rejection? Users work that shouldn't? Users don't work that should?

1 Like
3

Sorry for not providing an elaborated requirement.
If the user has "Developer" but not an administrator, still designer login or gateway login is not working. But in the required constraints, if user has any of the mentioned roles, the allotted activity should happen.

4

Anybody have ideas on this?

5

I think you need to

  • Set up your AD user source with "Soft Failover" to the "Default" user source.
  • In your AD user source create the Administrator role with spelling and capitalisation exactly the same as the role in the default user source.
  • Use AD for all logins, if possible.

If you have users such as contractors who do not have AD logins then create an account for them in the Default user source and give them the required roles. Again the roles should match those in the AD user source. The Administrator account can be used to log in using the Default user source if the AD user source fails for some reason.

6

I have done all the mentioned configurations.
But I need to restrict gateway and designer login (Only Users with Admin or Developer role should login)

7

What are your settings in Config/Security/General of the gateway?
Example: Mine is set up so that only Administrators can get the can get to the gateway settings, but anyone can get to the home page. It does not prevent people from logging in to the gateway, it just keeps unauthorized people from getting to places they shouldn't.

image
image942×1052 70.1 KB

Using my 'No-rights' user

image
image754×414 11 KB

The same 'No-rights' user can't use the designer at all.
image

8

What if i try to give config setting permission only to 'Developer' not admin,
when i try to enter developer (only as 'Developer' not as 'Authenticated\Roles\Developer' ) in the setting, eventhough i have developer role, now it is showing as unauthorized login .
So i am restoring my backup.
Any ideas on this

9

The gateway login is through the Identity Provider, not the user source. Hence, the Authenticated/Roles path.

1 Like