Securing Web Content User Data
- Last UpdatedJul 13, 2023
- 2 minute read
When you include a Web Content object in a project, you need to consider which users will be logging in to the runtime system and if they have any requirements to protect their user data (such as cookies, storage and browsing history).
Plant SCADA's runtime security system supports two types of user account:
-
Windows™ users (see Integrate Windows™ User Groups).
-
User defined in a Plant SCADA project (see Add a Plant SCADA User).
The following information describes the security implications for these two types of users.
-
Plant SCADA Users
When a Plant SCADA user logs in and opens a page containing a Web Content object, their user data will end up in an individual folder. However, this folder is stored under the user account of the Windows user that is currently logged into the operating system.
For example:
C:\Users\<OS Windows User>\AppData\Local\AVEVA Plant SCADA\WebContent\Profiles\<Plant SCADA User>\
If any users are able to access the file system, they could potentially view the user data files of other Plant SCADA users.
-
Windows Users
When a Windows user logs in and opens a page containing a Web Content object, their user data will end up in an individual folder. However, this folder is stored under the user account of the Windows user that is currently logged into the operating system.
For example:
C:\Users\<OS Windows User>\AppData\Local\AVEVA Plant SCADA\WebContent\Profiles\<Windows User>\
If any users are able to access the file system, they could potentially view the user data files of other Windows users.
This is not a concern if the Windows user attempting to access Plant SCADA is also logged into the operating system using their own account. This way, their user data folder will be secured within their individual Windows user account.
Note: If a Web Content object hosts a website or application that stores sensitive user data, it is recommended that you use Windows user accounts to secure Plant SCADA runtime. Each user also needs to be logged into the local operating system before they use the same account to log in to Plant SCADA.