Page 176
PROFIBUS-Specification-Normative-Parts-5:1997
Copyright by PNO 1997 - all rights reserved
Password
The PROFIBUS Specification distinguishes between the attribute password in the
object description and the parameter password of the Initiate service.
- attribute password ( object description )
This attribute contains an identification defined by the user that authorizes
access to the object in accordance with the attribute access rights.
- parameter password ( Initiate service )
This parameter indicates the password valid for a specific communication re-
lationship. If access with password shall not be provided on a communication
relationship the parameter password shall have the value 0.
In the case of a station supporting access with password, the values of the
parameter password received with the Initiate service shall be unique for all
communication relationships (exception password = 0 ).
Access Groups
The PROFIBUS Specification distinguishes between the attribute access groups in
the object description and the parameter access groups of the Initiate service.
There are 8 different access groups possible.
- attribute access groups ( object description )
This attribute contains the groups defined by the user, which authorize
access to the object in accordance with the attribute access rights.
- parameter access groups ( Initiate service )
This parameter defines the membership to one or several groups which is valid
for a communication relationship. If access with access groups is not to be
conducted on a communication relationship, the parameter access groups shall
have the binary value 00000000.
Access Rights
The PROFIBUS Specification differentiates rights, e.g. for reading, writing and
executing, according to access with password, access for access groups and ac-
cess for all communication partners. Thus it is possible to give differentiated
access rights, e.g., right to read for all communication partners, right to
write for access groups, right to delete for a single communication partner
(password).
The following communication objects may be assigned access rights:
Table 2. Access Rights to Objects
+--------------------+-------------------------------+
! Object ! Rights !
+--------------------+-------------------------------+
! domain ! upload , download , create PI !
! program invocation ! start , stop , delete !
! simple variable ! read , write !
! array ! read , write !
! record ! read , write !
! variable list ! read , write , delete !
! event ! alter , acknowledge !
+--------------------+-------------------------------+