b92fea15d4
- Configuration-004: NodePermissions stored as int to match the EF HasConversion<int>() in OtOpcUaConfigDbContext.ConfigureNodeAcl. - Configuration-005: serialise LiteDbConfigCache.PutAsync so concurrent Put for the same (ClusterId, GenerationId) cannot duplicate rows. - Configuration-007: rethrow OperationCanceledException from GenerationApplier.ApplyPass when the caller's token is cancelled. - Configuration-010: scrub secrets and drop the full exception object from the ResilientConfigReader fallback warning log. - Configuration-011: pin the previously-uncovered GenerationApplier cancellation and path-length / publish-validation paths. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
38 lines
1021 B
C#
38 lines
1021 B
C#
namespace ZB.MOM.WW.OtOpcUa.Configuration.Enums;
|
|
|
|
/// <summary>
|
|
/// OPC UA client data-path permissions per <c>acl-design.md</c>.
|
|
/// Stored as <c>int</c> bitmask in <see cref="Entities.NodeAcl.PermissionFlags"/>.
|
|
/// </summary>
|
|
[Flags]
|
|
public enum NodePermissions : int
|
|
{
|
|
None = 0,
|
|
|
|
// Read-side
|
|
Browse = 1 << 0,
|
|
Read = 1 << 1,
|
|
Subscribe = 1 << 2,
|
|
HistoryRead = 1 << 3,
|
|
|
|
// Write-side (mirrors v1 SecurityClassification model)
|
|
WriteOperate = 1 << 4,
|
|
WriteTune = 1 << 5,
|
|
WriteConfigure = 1 << 6,
|
|
|
|
// Alarm-side
|
|
AlarmRead = 1 << 7,
|
|
AlarmAcknowledge = 1 << 8,
|
|
AlarmConfirm = 1 << 9,
|
|
AlarmShelve = 1 << 10,
|
|
|
|
// OPC UA Part 4 §5.11
|
|
MethodCall = 1 << 11,
|
|
|
|
// Bundles (one-click grants in Admin UI)
|
|
ReadOnly = Browse | Read | Subscribe | HistoryRead | AlarmRead,
|
|
Operator = ReadOnly | WriteOperate | AlarmAcknowledge | AlarmConfirm,
|
|
Engineer = Operator | WriteTune | AlarmShelve,
|
|
Admin = Engineer | WriteConfigure | MethodCall,
|
|
}
|