6.PI_Security机制.pptVIP

中科信软高级培训中心 0106.0 Security 2 Security related Error messages -10400: 无权访问 -10401: 无权写操作 3 PI Server Security ? PI Users and Groups ? 访问权限 ? PI Trust ? 为交互式权限 ? Database Security ? 控制访问数据库 6.1 用户如何 Connect to PI 5 Accessing PI ? 访问 PI ，用户必须: ? ? ? ? 能够看到你的 PI server的地址 有合适的工具和一定的经验 足够了解你所建的点 必须通过 PI security 6 Connecting to PI – the PI SDK The PI SDK known servers table is maintained by the connections box of a PI client, including the About-PISDK utility found in \pipc\pisdk 7 Connecting to PI ? ? ? 接口机必须通过 security 访问 PI 改动 security 会使接口机连接中断 为了保证数据的连续性，请谨慎修改security 6.2 Users and Groups 9 PI Users and Groups ? 当 PI Server 安装以后 ? 会自动创建2个User: ? ? PIAdmin (Power user) PIDemo ? 两个group: ? ? PIAdmin (包括 PIAdmin) PIUser (包括 PIDemo) ? ? 一个用户可以是多个group的成员 在PI SMT中使用 Users and Groups 插件创建 Users 和 Groups 10 PI SMT Plug-In - Users and Groups ? 管理 groups 和 users 的隶属关系 PI Tag Security Configuration ? PI Tag security 被分为2个等级: ? Tag configuration access: ? Access is granted to Owner (PtOwner), Group (PtGroup) and World, via the PtAccess attribute Example: PtAccess = o:rw g:r w:r 通过 point access, 用户可以编辑 所有属性，除了 “data access”属性 ? Access to tag data: ? Access is granted to Owner (DataOwner), Group (DataGroup) and World, via the DataAccess attribute Example: DataAccess = o:rw g:r w:r 只有 owner (or piadmin) 可以修改 access 属性. 11 12 Import Windows Domain Users to PI ? 把Windows domain users 导 入到 PI users 表 ? 允许设置 domain username 作为pi 的初始密码. 13 Tag Security Set PI tag security parameters wherever you build your tags – Point Builder plug-in, PI Tag Configurator (Excel), etc. 14 Exercise 9 PI Users and Groups Objectives: ? Learn how to create groups containing users ? Learn how to create users and assign them to groups ? Learn how to define tags and data access 15 Reset Passwords ? ? Use the Users and Groups plug-in to change passwords. A user’s password can be reset by using an exclamation point as the old password. 16 Direc