How to set a user on read-only or read/write mod using a script on perspective

Ignition
1

Hello sommeone know wow to set a user on read-only or read/write setting using perspective using a script ?

I want put my perspective view on read-only to other user

for exemple:
if de user connected is “AAA”
set view on read-only
else
set view on read/write

2

The correct way is to create roles and assign roles to each user.

e.g.
User ‘AAA’ is assigned role ‘User’.
User ‘BBB’ is assigned roles ‘User’ and ‘Technician’.

https://docs.inductiveautomation.com/display/DOC81/Security+in+Perspective#SecurityinPerspective-PerspectiveViewsSecurity

Setting the view security is described in the manual.

3

Thank you. I will try it and read link doc

4

I have another problem. I can’t see my user roles

image
image755×580 39.7 KB

5

Did you create the users and roles?

  1. On the gateway go to Config | Security | Users, Roles, choose your user source.
  2. Create the roles you require. e.g. ‘User’, ‘Technician’, ‘Engineer’, etc.
  3. Create the users and assign roles to each user.

https://docs.inductiveautomation.com/display/DOC81/Managing+Users+and+Roles

6

yes, I create user and roles

image
image1530×515 75.2 KB

image
image1634×476 20.8 KB

image
image1499×523 17.1 KB

7

On the Designer try File | Update Project to see if that refreshes the roles in the Edit Permissions for view dialog.

8

I did it but it is not working.

9

Are your Project | Project Properties Identity Provider and User Source correct?

Identity providers
Identity providers770×445 47.6 KB

They should be set to the user source that contains the users and roles you are trying to use.

10

If you are trying set security permissions for a project under the Perspective > Permissions section of the project properties, like OP showed a screenshot of, those are defined under the Config > Security > Security Levels section of the gateway. A security level contained within the “Roles” security level needs to be manually added for each role defined in the identity provider, which is not always immediately obvious.

https://docs.inductiveautomation.com/display/DOC81/Security+Levels

11

I never really understood why this is a manual process :thinking: @PGriffith?

12

Not my area, but my guess is we didn’t want to automatically bring in all the ‘legacy’ baggage that may not actually apply to an IdP/Perspective security context anyways. Better to give you the tools and make it your problem :slight_smile:

That said, it does seem like we could expose a manual “copy roles from user source” button, or something. Again, not my area. Maybe a good thing to put in an ideas post…

3 Likes