Global Access
Global access control allows you to restrict user access to the yunIO server and the yunIO Designer.
The global access settings are accessible in the Access Control menu.
Restrict Designer and Server Access
Follow the steps below to restrict the access to the Designer and the server. By default, the access restrictions also apply to services. To define custom access restrictions for services, see Service Access.
- Navigate to the Settings menu.
- Enable Transport Layer Security, see Server Settings: Transport Layer Security.
- Restart the Windows yunIO service and connect to the Designer using an HTTPS connection.
- Navigate to the Access Control menu.
- Set the Server Access to Authenticated, see Server Access .
- Assign a restriction level to existing users, see Privileges .
- Click [Save].
- Restart the Windows yunIO service again.
When connecting to the Designer, you are now prompted to enter user credentials:
Note
If you lock yourself out and cannot login to the Designer, delete the permission.json file in the installation directory of yunIO e.g., C:\Program Files\Theobald Software\yunIO\config\servers\permission.json. Restart the yunIO server afterwards.
Tip
You can also use SAP credentials for basic authentication, see SAP Connection. Using SAP credentials and custom user credentials for basic authentication in parallel is not supported.
Settings
To open the global access settings, navigate to the Access Control menu.
Server Access
Activate or deactivate access control for the Designer and the server.
| Server Access | Description |
|---|---|
| Anonymous | If active, anyone can access the Designer and execute services. Anonymous is the default setting. |
| Authenticated | is active, only defined users with a designated restriction level have access to the Designer and the server. This option is available, if at least one user is defined and Transport Layer Security is enabled. |
Privileges
All users defined in the Users menu are listed in the subsection Privileges.
Select a restriction level from the dropdown list next to the user name to assign a restriction level. The following restriction levels are available:
| Restriction Level | Description |
|---|---|
| Server Admin | No restrictions. |
| Create / Modify | The user can login to the designer, create new connections and services, and modify existing ones. The user cannot make changes to users, access control, or server settings. |
| Read / Execute | The user can login to the Designer, but cannot make any changes. The user can run services. |
| No access | The user can not login to the Designer or run any services. This option can be used to temporarily disable users from using yunIO. |