Höppner, K.

Paper	Title	Page
MOW03	Integration of Renovated Networking Middleware into a Running Control System Environment	37
	U. Krause, L. Hechler, K. Herlo, K. Höppner, P. Kainberger, S. Matthies, G. Schwarz GSI, Darmstadt
	Currently the proprietary networking middleware in the GSI control system is replaced by a CORBA based re-design. Rebuilding all controls components is out of scope, so existing applications as well as device specific front-end software still have to be used. The renovated middle layer has to fit between the former applications device access interface and the front-end framework. Providing similar functionality as before was a major design aspect therefore. However, the new outline, targeting more flexibility and clearity, did not completely provide the established functionality from the beginning. Several extensions, had to be added which on the other hand lead to additional capabilities for future usage of the system.
	Slides
TUP017	Access Control in the Renovated GSI Control System: A Combined Name- and Rights-Server	119
	U. Krause, K. Höppner, S. Matthies GSI, Darmstadt
	The GSI control system implements an access control mechanism: Modifying of device settings is possible only when access rights are granted to the user. Originally integrated in the client side of the proprietary network layers, replacement of this middleware by the newly developed CORBA based communication required a new acess control implementation. Authorization is coded in device-specific patterns: A command is executed on the front-end server only when the correct pattern is provided. These patterns are handled by a central rights server, which is combined with the anyway needed CORBA naming resolution service. Being a lightweight approach, it should provide sufficient protection against undisciplined users which otherwise may severely disturb facility's operation.