User-Based Authorization

[abdullah123456789]

Hello.

I have added a hyperlink to a button on a mimic page in Geo SCADA Expert 2025 (March 2026 release), but I want to restrict its access based on user privileges. Ideally, an Admin user should be able to click it to navigate to the page, whereas an Operator user should not be able to click it. To solve this, I restricted the Operator's access via "Edit Security" on the target page; however, when an unauthorized user clicks the button, an access error pops up, and clicking "Close document" shuts down the entire current page. I need the user to remain on the active page instead.

As an alternative, I tried driving the PickDisable and Visible properties using a signal tied to the user's logged-in status, but because there are client machines continuously connected to the system, that signal stays at 1 permanently and doesn't work. What is the correct method to dynamically manage icon visibility or access control based on user roles without closing the current page? Could you please help?

[geoffpatton]

I have done this in a VBScript on the mimic with the button on it. If you have not used scripting before, Enable Scripting on your mimic's properties, then you can select the Edit button and enter something like the example below. On your button set the Pick Action to Script and select your Function. The code checks if the logged in user has admin rights to this mimic.

Option Explicit
Function OpenPage()
dim objOpCmd, iResponse
'Create a reference to the Open Object.
Set objOpCmd = Server.FindObject(Server.GetOPCValue(".Fullname"))
If objOpCmd.CheckAccess("ADM") = True Then
Mimic.Navigate("SCX:////CMimic/.Graphics.Pages.Admin Page")
Else
iResponse = MsgBox("You do not have Admin Privileges to access this button." , vbQuestion + vbOKCancel + vbDefaultButton2, "Admin Page Nav")
End If
End Function

[BevanWeiss]

In the situation you've portrayed, where the page isn't readable for an unauthorised user, then you could try using NOT(EXISTS(".. page fullname")) in the PickDisable animation.

I did think there was a security check option also, but I reckon I'm thinking of the VBA scripting that @geoffpatton mentioned.

[AdamWoodlandToo]

You can do CheckAccess in animations too, that might be what you're thinking of?

My question is do you want the hyperlink to appear and do nothing/give friendly error, or just not show, when the user doesn't have permissions. Will depend on how your users use the system, e.g. everyone uses a basic generic operator account and people log in as a privileged user when necessary (so seeing and a friendly message might work best) versus a strict everyone only ever uses their own account and which case showing nothing might work best.

[abdullah123456789]

Both the "friendly error" and the "not displaying it directly" issue would work for me.

I actually don't want to mess with the script side too much, because, for example, the file path of the page is already specified in the part where you write "SCX:////CMimic/.Graphics.Pages.Admin Page". There's no problem right now, but wouldn't moving the file path or elements like mimic to another file path break the whole structure?

Is there a way to track the user on a computer-by-computer basis? For example, I want the logon information to be 1 only when a user logs in from that specific computer. For instance, User1 logs in from PC1. The logon information for User1 also appears as 1 on PC2. But what I want is for the logon value to be 0 on PC2 even if it's 1 on PC1. In other words, I want the computer the user logs in from to only connect to themselves.

Is the setting I'll make from Edit Security considered the most reliable method? But the error message I'm getting is quite harsh this way. What do you suggest?

[BevanWeiss]

This is starting to sound confusing... why is there discussion of a 'specific computer'?  I thought you topic was about 'user authorization'.  So things should only be based on the user account in use (regardless of what computer its used on).

If you have different computers, and you want different permissions on each computer... then you should have a different user for each computer (but it's not a good idea to start with).

From your initial question.  The correct way would be as you've done with the object security.

But then on the PickDisabled animation just use

NOT(EXISTS(".Graphics.Pages.Admin Page"))

You could animate the Tooltip if you wanted also, so that non-administrator users got a little Tooltip that indicated it was "For Administrators only".