User's access to individual object of D2000 system is defined by assigning the defined object
groups to the given user - topic Configuration of user
- Object groups.
As one object can be a member of several object groups, a situation when two or more object
groups containing the same object are assigned to user can occur. In that case, the access right
with the highest priority is applied. The order of priority (from the lowest
to the highest) is Read, Control, Modify, No access.
Example
Groups of objects Group1 and Group2 are defined. Group1 contains all bitmaps -
[BITMAPS] and the group is assigned to user with Modify level of user access. Group2
contains, besides others, objects - bitmaps BOILER01.BMP and CONTAINER03.BMP and they
are assigned to user with No access level of access rights. The situation implies that user
might work with the objects BOILER01.BMP and CONTAINER03.BMP with Modify as well
as No access level. No access level of access rights will be applied when making decisions
about accessing those two files because it has higher priority than Modify level. It means that
user can work with all bitmaps in the system except for BOILER01.BMP and CONTAINER03.BMP.
If the user has access to some object, after opening it he / she also gets access (Read) to its referenced
objects.
Example
User has the access to a picture, does not have access to objects linked to the picture.
The access (Read) is granted after opening the picture. This implies that operator
can see values of objects without any access rights to them.