STEP 7's access protection permits you to protect projects and libraries with a project password. To set up access protection for a STEP 7 project, you need at least STEP 7 V5.4 and the options package SIMATIC Logon version 1.3 or higher. You can then implement the following functions:
- Protect STEP 7 projects and libraries against unauthorized access so that only authorized users can open the protected projects.
- Log online activities and logon procedures on the computer so that you can trace accesses and changes at any time.
- The access-protected projects can be synchronized in a multiproject.
The table below describes how to proceed to enable access protection and set up a user as project editor for your STEP 7 project.
||If you wish to add a project editor for your STEP 7 project in the user administration, then you must assign the appropriate user rights to that user beforehand in the user accounts via the Control Panel of the operating system. You must have administrator rights to create or change user rights in the Control Panel.
Fig. 01 shows an example for the user "Login_Test" with restricted access who has been set up in the user accounts via the Control Panel in Windows XP.
More information on assigning and changing users and user rights is available in our FAQ entitled
- "How do you assign standard user and administrator rights in the MS Windows 2000/NT/XP operating systems?"
in Entry ID: 21412424.
||In the SIMATIC Manager you open the STEP 7 project to be protected and enable the access protection via the menu command "Options > Access Protection > Enable".
Acknowledge the message displayed with "YES". You can no longer open the project with versions of STEP 7 older than V5.4. However, if you want to edit the project again with an older version of STEP 7, e.g. version V5.3, then you must disable the access protection beforehand.
||If the SIMATIC Logon Service is installed, the dialog shown in Fig. 04 opens. Enter your user name, password and the domain with which you also log on to the network when the PC is turned on. You need administrator rights for first-time logon and for setting up the project password.
Confirm with OK.
||In the "Enable Access Protection" dialog that opens next, you assign a project password and confirm with OK. The basic functions for access protection are now enabled and the additional menu items are released under "Options > Access Protection".
||Now, in order to set up a user a project editor you open the user administration in the SIMATIC Manager via the menu command "Options > Access Protection > Manage...".
The SIMATIC Logon Admin Tool opens. If this is the first time you are enabling access protection, the current SIMATIC Logon user is entered automatically in the role of "Project Administrator".
||Now, in the role of "Project editor", you mark "Groups and users" and then in "Available groups and users", you click on the local computer - here in this example "AD110374NB" (this computer). Then drag and drop the Windows user (here in this example "Login_Test" as shown in Fig. 08) to the role of "Project editor".
This newly entered user only has the right to edit a project, but not to change the project protection.
Save your changes under "File > Save" and close the user administration tool.
||Then enable the change log using the menu command "Options > Change Log > Enable". The access functions are now completely enabled.
Then close the STEP 7 project in the SIMATIC Manager.
||To logon as project editor with restricted function rights you open the logon service in the SIMATIC Manager via the menu command "Options > SIMATIC Logon Service..." (explicit logon). The logon is retained when the project is closed.
You can also open the access-protected project and enter the project editor in the logon dialog (implicit logon). In this case the project editor is automatically logged off when the project is closed.
||In the following dialog you enter the data for the project editor who has been set up.
The new user is displayed in the status line of the SIMATIC Manager at the bottom right.
||Now, when you open the STEP 7 project to be protected, you can edit the project with the right as project editor, but not with the right to change the access protection. The functions cannot be enabled and are grayed out (Fig. 12).
You can also open the project to be protected under a user who is not entered in the project administration. In this case, the "Enter Project Password" dialog opens when the project is opened. Here you must enter the correct password for the project, otherwise the project is protected against unauthorized access and does not open.
After entering the correct password, the project opens and you can edit it. With the correct password, the logged-on SIMATIC Logon user is automatically entered as Project Administrator.
More information is also available in the STEP 7 Online Help under "Information on access protection".
Note on the integrated WinCC and WinCC flexible projects:
You cannot set up access protection for WinCC and WinCC flexible projects integrated in STEP 7.