cliu
ef543cde20
- Summary of IM 36K10C10 (Engineering Module - I/O Processes), checked against dssana.sup, itm.sup and the default datasets - New skill authorization: users and authorization groups by quick load - item-engineering: string item limits (1-200, holds length - 1) and the integration granule (itm_int_secs), both tested on CI-Eng-Sample - CI-Eng-Sample: read-only authorization group CIENG_VIEWER - Closed ISS-001 (uoff/ublk option bits), ISS-010, ISS-019; new ISS-018, ISS-020 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
29 lines
1.5 KiB
Markdown
29 lines
1.5 KiB
Markdown
---
|
|
name: authorization
|
|
description: >-
|
|
CI Server R1.03 users, authorization groups, login and schemes. Use when the user wants to
|
|
create, list or remove CI Server users or authorization groups, choose authorization actions
|
|
(ITEM_READ, ITEM_MODIFY_VALUE, …), set process areas, logoff timeout or initial display for
|
|
a user, change how users log in (dssana.sup login method: Automatic, Manual CI Server,
|
|
Manual OS, No, SSO, Deny), or hide Engineering Module features with a scheme.
|
|
Sources IM 36K10C10-01EN §2; Active Directory and single sign-on follow in phase 13 (IM 36K10J40).
|
|
---
|
|
|
|
# Authorization (R1.03)
|
|
|
|
Background: `knowledge/manuals/IM36K10C10-01EN.md` §2 (login methods, actions, user tabs,
|
|
schemes). Login settings are in `dssana.sup` on CI Core (skill `portal-setup` for reading
|
|
and changing setup files).
|
|
|
|
Rules:
|
|
- Run the `system-check` skill first; follow the user's chosen way of working.
|
|
- Users are login accounts. Claude prepares user quick load files but the user loads them
|
|
and sets any password; never put real passwords in repo files.
|
|
- Remove users before the authorization group they belong to.
|
|
|
|
| Task | File | Status |
|
|
|---|---|---|
|
|
| Create, check and remove authorization groups and users (quick load) | `tasks/users-groups.md` | verified |
|
|
| Login methods per client and user interface (`dssana.sup`, tab *Login control*) | C10 summary §2 | from docs (installed values read) |
|
|
| Schemes (hide Engineering Module features) | C10 summary §2 | from docs |
|
|
| Active Directory, single sign-on, password rules | phase 13 | not covered |
|