Introduction

The beam line is a complex system, and many people with different job functions interact with it on a daily basis. Therefore the potential exists for the individual users of the system accidentally overstepping the bounds of their job function and interfering with the work of another system user.

In addition, the beam line control system is built on a network interface, and provides the user of the system the ability to interact with the beam line from nearly anywhere in the world. Although this in itself is good, the user of the system from a remote environment must again limit their own activities and somehow determine (from their remote location) that the way that they are using the system is safe. With the current system, each person using the beam line must be educated in the whole system, and be willing to restrict their own activities. Ideally, the beam line itself would limit the user's activities based on the following four factors:

1. Restrictions added to each user's account.

2. The physical location of the console that the Blu-Ice client is being displayed on.

3. Restrictions placed on the device that the user is trying to interact with.

4. The state of the beam line's hutch door.

This document introduces all of the restrictions that can be placed upon a device and relates these restrictions to the permissions that can be given to a user account. Example use cases are provided to show a subset of the possible restrictions that can be defined.