Universal Interface Service (UIS) Security

Security for the UIS is administered by the Access Control Service (ACS). As with other CygNet services, security is set on an application and event basis. The application name of the UIS is defined in the service configuration file using the keyword ACS_APPLICATION. The default is “UIS .” The security events are listed in the UIS Events table below.

The following tables provide details about UIS security settings. See also Security.

Service Application Name	Main Security Event	Component-Level Security	Subject to Application Override
UIS (name defined in service configuration file)	CONTROL (name defined in service code)	No	Yes, UIS is a target service

Service Application Name

Main Security Event

Component-Level Security

Subject to Application Override

UIS (name defined in service configuration file)

CONTROL (name defined in service code)

Yes, UIS is a target service

UIS Events

Event	Event Description	Authorization	Tasks
ACCESS	View device details and view/clear communication statistics	0-None	View the list
1-Read	View device details (device information) and communication statistics
2-Update	Clear communication statistics
3-Add	Inclusive
4-Delete	Inclusive
5-Admin	Inclusive
CONTROL	Modify a point’s current value	0-None	None
1-Read	None
2-Update	None
3-Add	None
4-Delete	None
5-Admin	Full permission for all service Events (except ODBC) regardless of the authorization for those Events or Application Override
ODBC	Access service records from an ODBC-compliant application	0-None	None
1-Read	View records in the service
2-Update	Edit existing records
3-Add	Add records
4-Delete	Delete records
5-Admin	Inclusive
QUEUES	Access the UIS queues: response processing queue for transactions response processing queue for point data wait queue comm device pending queues import export device message queues	1-Read	View items in queue
4-Delete	Delete items from queue
RTACCESS	View point records	0-None	None
1-Read	View the list of points in the service
2-Update	Modify a point’s current value using a setpoint command
3-Add	Inclusive
4-Delete	Inclusive
5-Admin	Inclusive
SVCINFO	Miscellaneous GenServe security management Note: The SVCINFO event allows changes to log settings and use of the GlobalFunctions method SetGenserveInfo without requiring higher privileges on other actions. Other tasks are listed at right.	5-Admin	Permission level required to perform the following tasks: Give ConfigFileManager remote access to service configuration files Change log settings Change how many threads are allowed to process the UIS response processing queue Change audit levels Perform on-demand backups Request an activation check

Event

Event Description

Authorization

Tasks

ACCESS

View device details and view/clear communication statistics

0-None

View the list

1-Read

View device details (device information) and communication statistics

2-Update

Clear communication statistics

3-Add

Inclusive

4-Delete

Inclusive

5-Admin

Inclusive

CONTROL

Modify a point’s current value

0-None

None

1-Read

None

2-Update

None

3-Add

None

4-Delete

None

5-Admin

Full permission for all service Events (except ODBC) regardless of the authorization for those Events or Application Override

ODBC

Access service records from an ODBC-compliant application

0-None

None

1-Read

View records in the service

2-Update

Edit existing records

3-Add

Add records

4-Delete

Delete records

5-Admin

Inclusive

QUEUES

Access the UIS queues:

response processing queue for transactions
response processing queue for point data
wait queue
comm device pending queues
import export device message queues

1-Read

View items in queue

4-Delete

Delete items from queue

RTACCESS

View point records

0-None

None

1-Read

View the list of points in the service

2-Update

Modify a point’s current value using a setpoint command

3-Add

Inclusive

4-Delete

Inclusive

5-Admin

Inclusive

SVCINFO

Miscellaneous GenServe security management

Note: The SVCINFO event allows changes to log settings and use of the GlobalFunctions method SetGenserveInfo without requiring higher privileges on other actions. Other tasks are listed at right.

5-Admin

Permission level required to perform the following tasks:

Give ConfigFileManager remote access to service configuration files
Change log settings
Change how many threads are allowed to process the UIS response processing queue
Change audit levels
Perform on-demand backups
Request an activation check