RBAC@AB/BT

1
RBAC_at_AB/BT

• Etienne CARLIER
• 30/05/2008

2
user logic implementationwith RBAC
User Function Action Property
All Monitor Read data Acquisition.
Operator Operate Remote control State Settings Alarm Operational limits State Setting Ack CriticalSetting
Expert Operate Local control Parameters Interlock thresholds Interlock masking LocalSetting ExpertSetting
Gurû Configure Parameters Fine tuning Equipment Hardware limits Interlock limits Interlock default logic FineSetting InstantiationSetting
3
Roles
ROLES ManagementOpMode BEAM
Operator LEVEL1 AB/OP
Operator LEVEL2 AB/BT
MCS AB/OP ???
BT Piquet AB/OP
BT Expert AB/OP

BT Developer AB/BT
4
Rules
CCC UA RT
Operator L1 State Setting Arm
Operator L2 State Setting Ack Arm
MCS CriticalSetting
BT Piquet LocalSetting State ExpertSetting State ExpertSetting
BT Expert State Expert Setting FineSetting InstantiationSetting LocalSetting State ExpertSetting FineSetting InstantiationSetting State ExpertSetting FineSetting InstantiationSetting
5
user logic implementationwithout RBAC
User Function Action Property Roles
All Monitor Read data Acquisition.
Operator Operate Remote control State Settings Alarm Operational limits State Setting Ack CriticalSetting Operator L1 Operator L2 MCS
Expert Operate Local control Parameters Interlock thresholds Interlock masking LocalSetting ExpertSetting BT Piquet
Gurû Configure Parameters Fine tuning Equipment Hardware limits Interlock limits Interlock default logic FineSetting InstantiationSetting BT Expert
6
Open issues

• Rules deployment logic
• Restrict or Authorize
• Rules inheritance within FESA composition
• LTIM, IE-PLC
• Instantiation data
• RT connection to local consoles
• ALARM acknowledgement within LASER
• Rule execution traceability
• Which, When, Who
• Roles and Rules within DIAMON
• Process restart, FEC reboot
• Expert Program
• WinCC (Management of an RBAC token???)