User - configuration dialog box

Configuration of user's parameters is being performed in the following dialog box.

The configuration dialog box consists of three basic parts (tabs):

• Definition
• Groups of objects
• HI settings

Definition

Full name

User's full name, which will be always displayed in the titles of process windows. (Required parameter).

Administrator

If the option is checked, the defined user is an administrator. The administrator has access rights to all objects of the D2000 system and can carry out all the parameters in the part Enabled actions are enabled (he/she can carry out all the actions). Normally, only administrators can log in to configuration processes of D2000: Application Manager, CNF, GrEditor, System Console, Tell. This setting can be changed by the application parameter AllowNonAdminConfLogin.

Disable logon

If the option is checked, the user's login to all D2000 processes is not allowed.

Limited to:

If the checkbox is checked, the user's definition will be limited by the date entered in the spin box placed right from this checkbox. After the expiration of the date, the system will deny to log on the user.

Time out

Timeout logoff is given in minutes. If the user is not carrying out any actions in the D2000 HI process within this time, he/she will be automatically logged off.

Enable empty password

If the checkbox is checked, the user does not need any password for access to individual processes of the D2000 system - only to enter the user's name (not full name). Logon is required only for client processes with the user interface - D2000 HI, D2000 GrEditor and D2000 DDE Server.

Max. expiration time [days]

If the option is checked, the password validity is limited by the number of days entered in the spin button placed right. After the expiration of this password validity, the user is called to change the password for 5 times. If he does not change it, the next logon will be denied. In the spin button Limited to, there is displayed information about the last day of the defined password validity.

Note
Each user can change their password via the dialog box in the D2000 HI process. After any password change, the password validity will be adjusted automatically to the date increased by the number in the parameter Max. expiration time.

Change password

During entering the new name and password, it is necessary to enter the same password twice - into the input fields Password and Confirmation to confirm the correctness of the password.

Change password at login

If the option is checked, the given user will be forced to change his/her password at the next logon into the D2000 HI process. After changing the password, the D2000 Server will automatically uncheck the option Change password at login (the change of password will not be necessary at the next logon). If the given user is currently logged on into the D2000 HI process, he/she will be automatically logged off from the process. This feature works also in the D2000 Thin Client.

Menu

The option Menu is used to select the object of HI MENU type, which will be inserted into the menu of the process D2000 HI after the user's logon.

User delimits external reference

If the option is checked, the system will generate a warning when the user tries to rename or delete the object on which the user has rights.



This option is useful when the value of some object is read/set through the process D2000 GateWay Server or D2000 OPC Server. Both processes refer to an object by name (without reference integrity), hence to rename or deleting the object can be dangerous. If these "delimits external references" are accessible to the user, the system will generate a warning when the user tries to rename or delete the object. This attribute does not influence the other parameters of object.

Allow configuring objects of User type

This option is useful only for users with administrator rights (option Administrator in the configuration dialog window). The administrator allows to configure the objects of User type, he can create, edit, rename and delete the other users. If the logged-on user is not an administrator they can only read these objects.

Composition

The checkbox Composition allows choosing a graphic information window (picture, graph) or composition of windows. The selected object will be opened on the HI process desktop always after the correct user's logon.

Macros

Definition of up to eight objects, that the user can open (start) from the D2000 HI process using command buttons in the toolbar or keyboard shortcuts (CTRL+1 up to CTRL+8).
These objects may be the following types:

• Picture
• Graf
• Composition
• Command file

Enabled actions

Enabling or disabling some special operations for the user in the HI process environment. Enabling (or disabling) will show (hide) the particular item in the menu of the process D2000 HI after the user's logon.

• Print - print graphs, and pictures.
• Edit archive - edit the archive - modify, delete, and insert values into the archive database.
• View archive - the subset of Edit archive: browse historical values using HI process facilities.
• HI Parameters - configuration of the HI process parameters.
• Stop HI - stop the process D2000 HI.
• Conf. of G, C, R - configuration of:
  • Graphs
  • Compositions
  • Reports
• Open G, C, R - open individual objects by means of the menu Open in Hi process environment.
• Edit dictionary - enables editing the Dictionary
• Structures - select structures from the list and then browse/modify it
• Alarms - open the list of Alarms.
• Logging - browse the log database.
• External tools - configuration of external tools.
• View TC - browse Time channels.
• Browser - open Browser.
• Macros - configuration of User macros.
• Open Pictures - open individual picture objects by means of the menu Open in Hi process environment.

Authentication methods

Selection of permitted authentication methods. As a default, only the D2000 method is permitted (verification of name and password configured in this dialog box). Other methods (NTLM, Kerberos, TCL, RFID) are disabled. To use other authentication methods than the default one you must enable the method to select/all users through the configuration parameters of the D2000 Server process.
The checkbox TCL also enables/disables to log on the user through a web browser in the thin client environment.

Domain
This parameter is mandatory for NTLM, Kerberos and TCL authentication. In all cases after the successful verification of the user's identity by the Windows authentication subsystem (NTLM/Kerberos) it is also verified that the user is logged into the domain with the same name as the value of parameter Domain (comparison is case-sensitive). If the domain name is different, the logon will fail and the log of process D2000 Server will contain the error message similar to this one:

Authentication: error in the domain - expecting Ipesoft, found IPESOFT

Group of objects

User's access to individual object groups is defined in the tab Object groups.

Add

Clicking the button will display the selection windows containing the list of all object groups. Functional buttons in the selection windows will add the selected group (or selection) into the list of user's object groups. The groups already added are grey.

Remove

The button will remove the selected object groups from the user's configuration.

Read

The button sets the access right Read for the selected groups.

Control

The button sets the access right Control for the selected groups.

Modify

The button sets the access right Modify for the selected groups.

No access

The button sets the access right No access for the selected groups.