SecurityManager.ini File

The following notational conveniences are used below:

VTS refers to the VTS installation directory.

OEM[x] refers to zero or more intermediate directories from which a VTS application may inherit objects and settings (i.e. OEM layers).

Application layer refers to the VTS application's end-user directory (which may be based on any number of OEM layers).

Server refers to the PC that is the active Security Manager RPC server for a particular VTS application.

Client refers to a PC acting as a Security Manager RPC client for a particular VTS application.

Workstation refers to the name of the PC as it is visible on the network.

Italics illustrate example file contents, as opposed to literal contents.

[…] (italicized ellipses) indicate that some file contents have been omitted for brevity.

ß are used to describe file contents; they are not part of the files themselves.

The SecurityManager.ini file contains initial security settings for any or all VTS applications. It enables you to customize the administrative settings related to security, including manual configuration of application privileges (i.e. custom privileges for the protection of controls and pages). Security settings are searched for and loaded in a manner consistent with the way objects and settings are inherited by a VTS application:

Server\VTS\SecurityManager.ini [Layer n]:

Settings are assigned; this file must be present, as it is part of VTS.

Server\OEM[n-1]\SecurityManager.ini [Layer n-1]:

Settings are assigned, overriding any previous assignments to the same settings; this file may not be present.

Server\OEM[n-2]\SecurityManager.ini [Layer n-2]:

Settings are assigned, overriding any previous assignments to the same settings; this file may not be present.

[…]

Server\OEM[2]\SecurityManager.ini [Layer 2]:

Settings are assigned, overriding any previous assignments to the same settings; this file may not be present.

Server\OEM[1]\SecurityManager.ini [Layer 1]:

Settings are assigned, overriding any previous assignments to the same settings; this file may not be present.

Server\App\SecurityManager.ini, Client\App\SecurityManager.ini [Layer 0]:

Settings are assigned, overriding any previous assignments to the same settings; these files may not be present initially, but will eventually be created, as explained below.

Notes:

•      The "[SecurityManager-PrivSys]" section, if present, should be stored in the active server's Server\VTS\SecurityManager.ini file. This section may be stored in Client\VTS\SecurityManager.ini files, but these settings will normally be ignored.

•      The "[SecurityManager-PrivApp]" section, if present, should be in the Server\OEM[x]\SecurityManager.ini and Server\App\SecurityManager.ini files. This section may be present in Client\OEM[x]\SecurityManager.ini files, but these settings will normally be ignored, and become replaced by the active server's settings.

•      The "[SecurityManager-Admin]" section, if present, can be stored in the Server\VTS\SecurityManager.ini, Server\OEM[x]\SecurityManager.ini and Server\App\SecurityManager.ini files. This section may be present in the Client\OEM[x]\SecurityManager.ini files, but these settings will normally be ignored. This section may be present in Client\App\SecurityManager.ini files, but these settings will normally be ignored, and become replaced by the active server's settings. If administrative settings are modified online, changes are first written to the active server's Server\App directory only; these changes are subsequently reloaded by all affected PCs, and then replicated to all Client\App directories.

•      In the event that the SecurityManager.ini file is not present in the directory of any OEM[x] or App layer, the Security Manager will attempt to retrieve the settings for that layer from Config.ini in that same directory. This is done for backward compatibility with previous versions of the Security Manager.

Location:

•      All VTS,

•      Any OEM[x],

•      Server\App (master copy), and

•      All Client\App (replicated).

 

Format (VTS only):

[SecurityManager-Admin] ß Administrative Settings Section

Setting1 = Value1a ß First setting

Setting1Min = Value1b ß Minimum value for first setting

Setting1Max = Value1c ß Maximum value for first setting

[…]

Settingn = Valuena ß Last setting

SettingnMin = Valuenb ß Minimum value for last setting

SettingnMax = Valuenc ß Maximum value for last setting

[SecurityManager-PrivSys] ß System Privileges Section

PrivBitsTotal = 35

PrivDesc0 = Configure

PrivDesc1 = Account View

PrivDesc2 = Account Modify

PrivDesc3 = Manager

PrivDesc4 = Administrator

PrivDesc5 = Alarm Disable

PrivDesc6 = Manual Data

PrivDesc7 = Questionable

PrivDesc8 = Alarm Acknowledge

PrivDesc9 = Application Close

PrivDesc10 = Station Mask Bypass

PrivDesc11 = Parameter View

PrivDesc12 = Release Lock

PrivDesc13 = Lock Item

PrivDesc14 = Remove File

PrivDesc15 = Update

PrivDesc16 = Rollback

PrivDesc17 = Page Add

PrivDesc18 = Page Modify

PrivDesc19 = Page Delete

PrivDesc20 = Tag Add/Copy

PrivDesc21 = Tag Modify

PrivDesc22 = Tag Delete

PrivDesc23 = Internet Client

PrivDesc24 = Alarm Mute

PrivDesc25 = Alarm Silence

PrivDesc26 = Group Modify

PrivDesc27 = Group Save

PrivDesc28 = Group Delete

PrivDesc29 = Pen Modify

PrivDesc30 = Note Add

PrivDesc31 = Alarm Page Access

PrivDesc32 = Reports Page Access

PrivDesc33 = History Page Access

PrivDesc34 = VIC Tools Access

[SecurityManager-Status] ß Status Variables Section

Secured = 0 ß Initially in Unsecured Mode

Format (OEM[x] and APP only):

[SecurityManager-Admin] ß Administrative Settings Section

Setting1 = Value1a ß First setting

Setting1Min = Value1b ß Minimum value for first setting

Setting1Max = Value1c ß Maximum value for first setting

[…]

Settingn = Valuena ß Last setting

SettingnMin = Valuenb ß Minimum value for last setting

SettingnMax = Valuenc ß Maximum value for last setting

[SecurityManager-PrivApp] ß Application Privileges Section

PrivBitsTotal = n

PrivDesc0 = Application 0

[…]

PrivDescn-1 = Application n-1

[SecurityManager-Status] ß Status Variables Section

Secured = mode ß Secured Mode or Unsecured Mode