[Permission->User Administration->Workstation] Has anyone managed to use it?

[nurlygayanov]

I tried restricting user permissions by setting some authorization bits to zero, but it made no apparent effect on the system behavior. After the changes, getUserPermission() and _auth config behaved as before them.

The steps to reproduce the problem are very simple - i created a 'Engineer' in a custom group 'Engineers', changed 17th authorization bit of the group to 1, and in 'Workstation' panel I set 17th authorization bit for my machine and the group to 0. When i tried getUserPermission(17) under user 'Engineer', it returned 1. I also was able to change _original.._value of a DPE that had _auth._original._write = 17 through PARA under user 'Engineer'.

[leoknipp]

I've tested it with a project and the newest WinCC OA version 3.15.
For the test a new user group and user was defined as described in your test case.
Also the workstation permissions were set for two computers.

For the user group defined for the user the permission bit 17 was set to 1.
For the UI-client 1 the permission bit 17 was set to 1 and for the UI-client 2 to 0.

If a login (using the login panel) is made at UI-client 1 the function getUserPermission(17); returns 1 as the user and the workstation has the permission bit set.
If a login (using the login panel) is made at UI-client 2 the function getUserPermission(17); returns 0 as the work station does not have this permission bit set.

I made also another test with the following pre condition.
For the user group defined for the user the permission bit 18 was set to 0.
For the UI-client 1 the permission bit 17 was set to 1 and for the UI-client 2 to 0.

In all cases getUserPermission(18); returns 0 as the user does not have the permission bit set.

Please check again if it works in your system when a login is made using the login panel.

Best Regards
Leopold Knipp
Senior Support Specialist