Database security table (DBSECURITY)
- Last UpdatedJun 29, 2023
- 2 minute read
- PI System
- PI Server
Database-level security controls the access rights of users and groups to the various system databases; for example, create a point.
For a detailed discussion of database security, see the Data Archive Security.
.
Database security is accessed through the DBSECURITY table. This is a general database security table; its structure applies to all databases. The record structure looks like this:
|
DBSECURITY Attribute |
Description |
|
DBName |
Database name |
|
Description |
Description of the functional areas and database tables controlled by this entry. |
|
Access |
Security attribute, which specifies access to the table |
|
Group |
Group name |
|
Owner |
PI user name declared to be the owner of the table. Defaults to Piadmin. |
|
Security |
Access control list which specifies access to the table |
|
status |
For internal use |
The following examples show how to access and modify the DBSECURITY table.
C:\pi\adm>PIconfig table dbsecurity
* (Ls - DBSECURITY) PIconfig> @ostru dbname, owner,group,access
* (Ls - DBSECURITY) PIconfig> @ends
*PIconfig Err> Wild-card specs. missing, default to '*'.
PIARCADMIN,piadmin,piadmins,o:rw g:r w:r
PIARCDATA,piadmin,piadmins,o:rw g:r w:r
PIBatch,piadmin,piadmins,o:rw g:r w:r
PICampaign,piadmin,piadmins,o:rw g:r w:r
PIDBSEC,piadmin,piadmins,o:rw g:r w:r
PIDS,piadmin,piadmins,o:rw g:r w:r
PIHeadingSets,piadmin,piadmins,o:rw g:r w:r
PIModules,piadmin,piadmins,o:rw g:r w:r
PIPOINT,piadmin,piadmins,o:rw g:r w:r
pisnapss,piadmin,piadmins,o:rw g:r w:r
PITransferRecords,piadmin,piadmins,o:rw g:r w:r
PIUSER,piadmin,piadmins,o:rw g:r w:r
Modify the access to archive data and allow the piusers identity:
* (Ls - DBSECURITY) PIconfig> @mode edit,t
* (Ed - DBSECURITY) PIconfig> @istru dbname,owner,group,access
* (Ed - DBSECURITY) PIconfig> PIARCDATA,piadmin,piusers,o:rw g:rw w:
*> PIARCDATA,piadmin,piusers,o:rw g:rw w:
Modify the access to PI Base Subsystem auditing and thread table:
* (Ed - DBSECURITY) PIconfig> pibasess,piadmin,piusers,o:rw g:rw w:r
*> pibasess,piadmin,operators,o:rw g:rw w:r
Modify the access to the PI Update Manager thread table (there is no auditing in PI Update Manager):
* (Ed - DBSECURITY) PIconfig> piupdmgr,piadmin,piusers,o:rw g:rw w:r
*> piupdmgr,piadmin,piusers,o:rw g:rw w:r
* (Ed - DBSECURITY) PIconfig> @mode list
* (Ls - DBSECURITY) PIconfig> @ends
*PIconfig Err> Wild-card specs. missing, default to '*'.
PIARCADMIN,piadmin,piadmins,o:rw g:r w:r
PIARCDATA,piadmin,piusers,o:rw g:rw w:
pibasess,piadmin,piusers,o:rw g:rw w:r
PIBatch,piadmin,piadmins,o:rw g:r w:r
PICampaign,piadmin,piadmins,o:rw g:r w:r
PIDBSEC,piadmin,piadmins,o:rw g:r w:r
PIDS,piadmin,piadmins,o:rw g:r w:r
PIHeadingSets,piadmin,piadmins,o:rw g:r w:r
PIModules,piadmin,piadmins,o:rw g:r w:r
PIPOINT,piadmin,piadmins,o:rw g:r w:r
pisnapss,piadmin,piadmins,o:rw g:r w:r
PITransferRecords,piadmin,piadmins,o:rw g:r w:r
piupdmgr,piadmin,piusers,o:rw g:rw w:r
PIUSER,piadmin,piadmins,o:rw g:r w:r
* (Ls - DBSECURITY) PIconfig>