CITECT2018R2做web发布练习6-文件系统安全配置
标签:
施耐德citect2018r2web发布练习 |
分类: 施耐德PLC |
继续根据资料做练习。
The security settings in the Web
Server file system need to be changed manually.
需要手动修改web服务器上文件系统的安全设置。
1. Change the default security
settings in the Web Server folders
修改web服务器上文件夹的默认安全设置。
Note: These changes only need to be
made on the computer that is going to be the Web Server.
注意:只需要对作为web服务器的计算机做这些修改(其他计算机不用)
i. In
the Windows™ Explorer, locate the Citect folder
在windows资源管理器上定位到citect文件夹。
The
default location for this is: C:\Inetpub\wwwroot
默认定位在这里C:\Inetpub\wwwroot
ii.
Right click the Citect folder and select Properties from the
menu.
右键点击citect文件夹,从菜单中选择属性
iii.
Open the Security tab
打开安全选项卡
iv. Click the Edit button
点击编辑按钮
2. Add the three Web Client groups to
the folder security.
添加3个web客户端用户组到此文件夹
i. In the Permissions for Citect
dialog box, click the Add button to add
the three new
groups created in the previous exercises.
在权限对话框中,点击添加按钮,添加前面练习创建的3个用户组。
ii. Confirm that the right Location
is selected to which the previously
created Users and
User Groups belong to.
请确认选择的“位置”与前面创建的“用户”和“用户组”所属的“位置”一致。
iii.
Type WebAdmins in the textbox for the Web Administrators group
and click the
Check Names button to validate the entry.
在Web
Administrators组的文本框中键入WebAdmins,然后单击Check
Names按钮以验证条目。
iv.
Click the OK button
点击确定按钮
Confirm all three groups have Read &
Execute, List Folder Contents and Read permissions selected.
确认所有三个组都选择了“读取和执行”、“列表文件夹内容”和“读取"权限.
vii.
Click the Apply and OK button to save the changes.
点击应用和确定按钮保存更改。
viii. Right click the Citect folder
again and select Properties from the menu
再次右键点击citect文件夹,从菜单选择属性
ix. In the Security tab, click the
Advanced button.
在安全选项卡,点击高级按钮
x. Click the Change Permissions
button
点击修改权限按钮
xi. Select the Replace all child
object permissions with inheritable permissions from this object
checkbox
勾选“使用可从此对象继承的权限项目替换所有子对象的权限项目”
xii. Click the Apply button to save
the changes
点击应用按钮
xiii. A Security dialog will
appear
出现安全对话框
xv. Click OK to close the Citect
folder properties
点击确定按关闭citect文件夹属性
xvi. Click the OK button to close all
the remaining dialogs
点击确定按钮关闭提示对话框
3. Change individual folders to
distinguish permissions for the Web
Client User
Groups.
更改各个文件夹以区分Web客户端用户组的权限.
i.
Open the Windows™ Explorer and browse to
C:\Inetpub\wwwroot\Citect
打开Windows™资源管理器,浏览到C:\Inetpub\wwwroot\Citect。
ii.
Right click the deploy folder and select the Properties
option.
右键点击deploy文件夹,选择属性选项
iii.
Click the Security tab and click the Edit button.
点击安全选项卡,点击编辑按钮
iv.
In the Permissions for deploy dialog box, select the WebAdmins
group and select
the Allow (Full Control) check box as shown
below:
在“权限”对话框中,选中WebAdmins组,并选中“允许(完全控制)”复选框,如下所示:
This allows the WebAdmins group to
create sub folders in the deploy folder. The deploy folder is where the Citect
SCADA project files will be located when the project is deployed, as it was
in Exercise - Web Deployment Preparation (page A -
24).
此举允许WebAdmins用户组在deploy文件夹下创建子文件夹。deploy文件夹是项目配置时Citect
SCADA项目文件的位置,就像在练习- Web配置准备中一样。(A-24页)
v.
Click the Apply and OK buttons to save the changes and close the
dialog box.
点击应用和确定按钮保存修改,关闭对话框。
vi.
Click the OK button to close all the remaining dialog
boxes.
点击确定按钮关闭剩余的对话框。
vii.
Right-click the #displayclient folder located in the deploy folder
and select the
Properties option.
右键点击delploy文件夹下面的#displayclient 文件夹,选择属性选项
viii.
Select the Security tab and click the Edit button
选择安全选项卡,点击编辑按钮
ix. In the Permissions for deploy
dialog box, select the
WebViewOnlyClients group and select the Deny (Full Control) check
box as shown below:
在权限对话框,选择WebViewOnlyClients
用户组,选择“完全拒绝”,如下图所示
This will select Deny for all
levels
这将为所有级别选择拒绝。
Note: The Deny setting will override
the Allow setting.
注意“拒绝”设置将覆盖允许设置。
x. Click the OK buttons to save the
settings.
点击确定按钮保存设置
xi. A Security dialog will be
displayed. Click the Yes button to continue
出现安全对话框,点击是按钮继续
xii. Click the OK button to close all
the remaining dialog boxes
点击确定按钮关闭所有保留的对话框
5. Test that the security settings
are performing correctly
测试安全设置是否正确执行
i. From the Windows™ Start Menu,
launch the Citect SCADA Web Client
从windows开始菜单,加载citect web
client
ii. Log in as the WebAdminUser who
was added to the WebAdmins group.
以加入WebAdmins组的WebAdminUser登录(指的是操作系统登陆用户)
The WebAdminUser has Administrator
rights and will see the web-page as shown below:
webAdminUser 用户有administrator权限,将看到下面这个样子的web页面(在IE浏览器地址栏输入localhost/citect,一定要是IE模式,edge浏览器或报错)
Observe the Action icons. Four icons
are for the deployment along with the Help and New Deployment icons (these will be
discussed in greater detail in the Web Client Home Page (page A - 45)
section).
观察活动图标,除了帮助和新的布置图标外,还有四个用于布置的图标。
iii. Close the browser and log in as
the WebControlClients user and WebViewOnlyClients user to see the
differences.
关闭浏览器,分别使用WebControlClients
和 WebViewOnlyClients 用户登录,观察区别。
下图是使用WebControlClients 用户登录后,浏览器打开localhost/citect的样子
图标剩下“启动控制客户端”和“启动进查看客户端”
下图是WebViewOnlyClients 用户登录后,浏览器打开localhost/citect的样子
只有一个启动进查看客户端的图标

加载中…