|
Access control on Object level
The Xi interface and WCF security control the access to the server. Clients that are allowed access to teh server have access to all objects of the server. The Advosol Xi servers implement an additional security layer. The server configuration can restrict the object access individually for each client. E.g one client may have read/write access to all objects but other clients can only read a few objects. Browsing the server shows only the objects this client is allowed to access.
The clients are identified by either the Windows user name or by a X509 certificate. Access can further be restricted based on the client IPC address. The access can be restricted to e.g. deny write access, deny access to a set of object or allow access to only a configured set of objects.
This XiConfig Access Restrictions form helps create and edit object access restriction configurations. The Xi server can be browsed and objects can be dragged to a list of objects that are either allowed or blocked for particular clients.
|