Evaluación de costes de la CAUC

The FactoryTalk Batch clients (BatchCampaign, Batch View, Equipment Editor, Recipe Editor, and the Batch ActiveX controls) have product policies that can be secured with FactoryTalk Security.

For example, you can configure FactoryTalk Security to specify which FactoryTalk Batch View toolbar buttons and windows are available to specific users or groups of users.

Removing a user group from a security policy disables the corresponding View toolbar button for all users who are members of that user group. When a button is disabled, it no longer appears on the FactoryTalk Batch View toolbar.

Additionally, you can restrict access to resources based on where a user is physically located, such as a computer used to perform actions. (For more information see FactoryTalk Help.)

Configuring security for the FactoryTalk Batch View windows

To tighten security for a FactoryTalk Batch View window, configure the corresponding product policy in the appropriate FactoryTalk Directory.

On the Batch Server computer (Computer1 in this example):

1. Open the FactoryTalk Administration Console and log on to the appropriate FactoryTalk Directory. For this example, select the Network Directory.

2. Configure security for the FactoryTalk Batch View windows:

 Expand System > Policies > Product Policies > Batch > BatchView & ActiveX and then right-click on View and select Properties.

 From the View Properties dialog box, select the policy setting you want to configure and click the corresponding browse button. For this example, click the browse button for the Exit policy.

The Configure Securable Action dialog box opens.

 Click the Add button. The Select User or Group dialog box opens. Select the user or group you want to add and click OK. For this example, select the Batch Operators group.

 To allow the group access to the feature, select the Allow check box.

3. Tighten security for this command:

 Select the All Users group and click Remove.

 Click OK twice to return to the FactoryTalk Administration Console.

4. Test the policy setting:

Product policies do not inherit security settings. When specifying permissions for product policies, clearing both the Allow and Deny check boxes denies access to the product feature. (For more information on permissions see FactoryTalk Help.)

Restart all open FactoryTalk Batch components to update changes made in the FactoryTalk Directory.

 Open FactoryTalk Batch View and log in as log in as SWhite (the password is password). Note that the status bar shows SWhite as the currently logged in user and the Exit button is on the toolbar:

 Now click the Log In button (shown at left) and log in as PSmith (the password is password). Note that the status bar shows PSmith as the currently logged in user, and the Exit button is no longer displayed on the toolbar:

 Log in as a FactoryTalk administrator, or as a user who has access to the Exit policy, and you will be able to close the program.

Configuring Security for FactoryTalk Batch Commands

In addition to securing access to various windows and buttons in the FactoryTalk Batch View, you can opt to allow only specified users to issue commands against a batch or a phase. Add the appropriate users and/or user groups to the Command or Phase Command policy setting you want to secure.

1. To add a user and/or user group to a Command policy setting:

 Open the FactoryTalk Administration Console and log on to the appropriate FactoryTalk Directory. This example uses the Network Directory.

 Expand System > Policies > Product Policies > Batch > BatchView & ActiveX.

 Right-click on Commands (or Phase Commands) and select Properties from the pop-up menu. The Commands Properties dialog box opens.

 Select the policy setting you want to configure and click the corresponding browse button. For this example, select Add Batch. The Configure Securable Action dialog box opens.

 To add a user or group select Add. The Select User and Computer dialog box opens.

 Select the user or group you want to add and click OK. For this example, select Batch Operators.

2. Tighten security for this command:

 Select the All Users group and click Remove.

 Click OK twice to return to the FactoryTalk Administration Console.

3. (Optional) Log in to FactoryTalk Batch View as SWhite and attempt to add a batch to the batch list. Then log in as LWilliams, who does not have permission to add a batch, and try adding a batch to the batch list. You will be prompted that the user does not Restart all open FactoryTalk Batch components to update security changes made in the FactoryTalk Directory.

Enabling FactoryTalk Batch View Confirm Settings

If you assign specific users and/or groups to a batch command or phase command and enable the corresponding Confirm policy setting, then only the specified users are allowed to issue the command and they will be required to enter a user name and password to confirm the command being initiated.

1. Configure Phase Command policy settings:

 Open the FactoryTalk Administration Console and log on to the appropriate FactoryTalk Directory. This example uses the Network Directory.

 Expand System > Policies > Product Policies > Batch > BatchView & ActiveX.

 Right-click Phase Commands, and then select Properties from the pop-up menu.

The Phase Commands Properties dialog box opens.

2. Configure policy Confirm settings:

 Scroll down to the BatchView and ActiveX - Phase Commands - Confirmations policy settings. Select the policy setting and click the

corresponding dropdown list. Select True to require a user to log on with a user To configure Command Confirm policy settings substitute Commands for Phase Commands in the following steps.

name and password each time the command button is clicked. Select False if no logon is required.

In the example shown above, the Clear Failure - Confirm is set to True. This will require a user to enter their FactoryTalk user name and password when he or she wants to clear a failure while a batch is running.

 Click OK to return to the FactoryTalk Administration Console window.