[Sbs] training requirements

[Ole Hansen]

Hi Carlos and all,

indeed, this is probably the most authoritative place for us to go for 
this kind of information.

This page also allows you to check other people's access permissions by 
entering their name in the field at the top of the screen (cut off in 
your screenshot). We did just that for our Feb 2 Owl Shift Leader. Very 
oddly, the page claimed that she had "Full Access" to the accelerator 
site. All we could do is shake our heads. It made no sense.

On the middle page in your screenshot, there is a link named "Click here 
for cansin [sic] history". It brings up a log of "CansIn" events, which 
I interpret as "updates to the CANS database". Clicking each log entry 
yields a cryptic block of data fields. The last of these fields lists 
the person's access rights in clear text. Above it is a long numerical 
string consisting of "0", "1" and "2"s, which I interpret is the 
machine-readable form of the access rights in form of a binary mask or 
similar. If the last field is mostly empty, and the numerical string is 
all "0", the person's badge is disabled as of the time of the entry 
(shown in another field), I believe. If the numerical data contain "1" 
and "2" intermixed with "0"s, the badge is active, and one can see 
human-readable details in the field below. This appears to be the REALLY 
authoritative info. The nice, color-coded, human-readable table in the 
rightmost panel may not always be fully up to date.

Now check this log for a person whose access permissions are known to 
have been problematic recently. You'll probably discover that the log 
entries are a confused mess. Access rights might oscillate between 
allowed/disallowed a couple of times within a matter of hours. This is 
what lousy, buggy software would do. (It's hard to imagine JLab admin 
people randomly clicking on/off buttons, often at off-hour times.) Also 
note the log time stamps may be out of order. Maybe the time on some 
server isn't synced correctly?

Doing just this for our Feb 2 Owl Shift Leader does reveal a disabled 
badge for the time in question.

I'd be quite interested in someone explaining these logs, and what 
triggers the disablement, along with the various observed 
inconsistencies. Instead, I bet what will happen (wait for it) is that 
our ability to see the log data will disappear without explanation.

Ole

On 2.2.23 at 17:17, Carlos Ayerbe Gayoso via Sbs wrote:
> Hi Don,
>
> my two cents, an alternative to be sure is checking the access list to 
> the buildings from https://misportal.jlab.org. login and find the 
> Building Access link in the portal (figure attached)
>
> BUT this only works with JLab computers (not even WiFi), so if you 
> want to check, just connect to a JLab computer through VNC or VDI
>
>
>
>
>
>
>
> Cheers
> -Carlos
>
> -------------------------------------------------
> If you receive this e-mail after hours, during a weekend, or on a holiday,
> please enjoy your time off and respond during your working hours.
> ------------------------------------------------------------------------
> *From:* Sbs <sbs-bounces at jlab.org> on behalf of Donald Jones via Sbs 
> <sbs at jlab.org>
> *Sent:* Thursday, February 2, 2023 4:33 PM
> *To:* rmontgom--- via Halla_running <halla_running at jlab.org>; 
> sbs at jlab.org <sbs at jlab.org>
> *Subject:* [Sbs] training requirements
> Hi Folks,
> Shifters continue to have issues with expired training preventing them 
> from accessing the accelerator site. You can check your training by 
> going to https://misportal.jlab.org/training/people/srl and searching 
> under your name (or anyone else's). I also added the link to the shift 
> schedule as shown in the screen grab below.
>
> -Don
>
> Donald Jones
> Hall A/C Staff Scientist
> Jefferson Lab
> Newport News, VA
>
> _______________________________________________
> Sbs mailing list
> Sbs at jlab.org
> https://mailman.jlab.org/mailman/listinfo/sbs
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mailman.jlab.org/pipermail/sbs/attachments/20230202/82c36929/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Screenshot from 2023-02-02 16-44-30.jpg
Type: image/jpeg
Size: 406531 bytes
Desc: not available
URL: <https://mailman.jlab.org/pipermail/sbs/attachments/20230202/82c36929/attachment-0001.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 67579 bytes
Desc: not available
URL: <https://mailman.jlab.org/pipermail/sbs/attachments/20230202/82c36929/attachment-0001.png>