AB Micrologix web page access

Hello all

I have tried this on a Micrologix 1100 (FRN9) and 1400 (FRN4)
(The default administrator password is ml1100
The default guest password is guest)

Assume plc is at address 192.168.1.1

Use a pc connected to the PLC with a browser with popups enabled.

Setup a user test password test with permissions "write" under the administrative settings / user management screen

Create a program with N7:0 and N10:0 files.

Under Data Views / New Data View set the N7 file to have write access group.
Set N10 file to have read access only.

Now in a new browser paste in the following (its all one line)

http://192.168.1.1/datachange.htm?offset=7&element=0&value=16384

The link above doesn't show the command - the last bit is offset=7&element=0&value=16384

You will be asked for a password - type in test and test into the password popup.
This should set bit N7:0/14

OK now try the same command but writing to N10:0/14 which is set to have read access only.

http://192.168.1.1/datachange.htm?offset=10&element=0&value=16384

The link above doesn't show the command - the last bit is offset=10&element=0&value=16384

This also works - ie bypasses the security.

Al

Ill have a look tonight, I am currently working on an ML1100 project on the bench.

You had a quiet night tonight to find that one ???

I have just tried this on the ML1400 with FRN5 as well and it behaves the same.

After further investigation it looks like the access group priviledges mean that

Read - you can only see files in group read and cant write to anything

Write - you can see files that are read or write and write to them both - ie you can write to "read" group files. Hence assigning a file to read group rather than write doesn't mean its read only. Assigning a file to the write group means that it is hidden from the read group and hence cant be read.

Administrator - can see all files and write to them all and change file groups.

So if you only want to allow permission to write to one particular file and read all the rest, you can't do it as far as I can see?

The file permissions for the ML1400 appear to be in a file called http://192.168.1.1/filelist.xml
Anybody know how to ftp it onto the ML as it would make the web server setup much quicker?

In FRN5 on the ML1400 the command to write data is like this
http://192.168.1.1/change.htm?file=7&element=0&value=16384

(The last bit is file=7&element=0&value=16384)


Al