Limit access to authorized data on Events, Alarms, Tabular viewers.

riclolsen · Sep 3, 2024 · c7eab9a · c7eab9a
1 parent d8dba4a
commit c7eab9a
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/src/server_realtime_auth/index.js b/src/server_realtime_auth/index.js
@@ -1900,6 +1900,13 @@ let pool = null
 
                 let Results = []
                 results.map((node) => {
+                  // check for group1 list in user rights (from token)
+                  if (AUTHENTICATION && userRights.group1List.length > 0) {
+                    if (!userRights.group1List.includes(node.group1)) {
+                      // Access to data denied!
+                      return node
+                    }
+                  }
                   let NodeId = {
                     IdType: opcIdTypeString,
                     Id: node.tag,
@@ -2122,6 +2129,13 @@ let pool = null
 
           let Results = []
           await results.map((node) => {
+            // check for group1 list in user rights (from token)
+            if (AUTHENTICATION && userRights.group1List.length > 0) {
+              if (!userRights.group1List.includes(node.group1)) {
+                // Access to data denied!
+                return node
+              }
+            }
             let Value = {
               Value: {
                 Type: opc.DataType.String,