Part 4 - API Whitelisting
In this 4 part of the tutorial, we will add a missing whitelist value in the database.
The Calc Engine is using the calculation whitelist for a security reason and it is not allowing user to run malicious code. Only database admin user can edit the Whitelist database.
If calculations are in progress, they must be restarted to obtain a new whitelisting's.
DisclaimerPlease be careful when you make changes to the calculation whitelist database values.
If you add there new values make sure that you're not introducing a security hole update and ABB takes no responsibility of those.
The whitelist
First you have to use direct connection to your local RTDB database:
Next open Whitelist database values from the tree:
Add new value in the whitelist:
Commit changes:
Last check the calc engine code again.
Definition: (None) - means that the Whitelist value is used for all calculations.
For example: Definition: "sum_code" - means that the Whitelist value is used only for that Definition.
Whitelist types:
Wildcard - means that the Whitelist value is a Wildcard format like:
System.Text.*Regular expression - means that the Whitelist value is a Regular expression format like:
^System\.Text\..*The members of a class are accessed by using WholeClass. A class in C# is fully known by its respective namespace and needs to be white listed as:
[namespace].[ClassName]System.Globalization
UserGroup: Empty - means that the Whitelist value is used for all calculations.
For example: UserGroup: "\RTDB-CalcUser" - means that the Whitelist value is used only for that user group.
Updated 5 months ago
