1. RBAC Content: LHC Operational Mode Piquet Roles RBAC Strict LHC Operational mode and CMW Acknowledgements: Pierre C., Wojtek S., Stephen P., Lars J., Verena K., Mike L. 09/06/2009 R. Alemany LHC Beam Commissioning Meeting 1

2. LHC Operational Mode What is the LHC Operational Mode?  16 bit word in which only 9 bits are used: BIT 0BIT 1BIT 2BIT 3BIT 4BIT 5BIT 6BIT 7BIT 8 SECTOR12SECTOR 23SECTOR 34SECTOR 45SECTOR 56SECTOR 67SECTOR 78SECTOR 81BEAM OPERATION OPERATIONAL (1)/NON-OPERATIONAL (0) USED BY SECTORIZED EQUIPMENT, e.g. PCNON- SECTORIZE D EQUIP e.g. BI + PC 09/06/20092 R. Alemany LHC Beam Commissioning Meeting IF BEAM MODE BIT = OPERATIONAL, SECTOR BITS ARE OVERRIDDEN Which ACCELERATOR MODES are considered OPERATIONAL and which are considered NON-OPERATIONAL: The OPERATIONAL MODE doesn’t change often, it is associated to the ACCELERATOR MODE

3. Accelerator mode name DescriptionBEAM OP MODE SHUTDOWN Usual winter status. Cold magnets floating. NON-OPERATIONAL COOLDOWN* Coming back from shutdown. The principal activity during this mode is cryogenics related, i.e. simultaneous cool down of several sectors. NON-OPERATIONAL MACHINE CHECKOUT* Cold machine checkout periods following the yearly shutdown. The machine checkout is the final test to take place before the injection of first beam. NON-OPERATIONAL WARM-UP* One or more sectors warming up for repair. NON-OPERATIONAL SECTOR DEPENDENTNON-OPERATIONAL BEAM SETUP Machine commissioning with one or both beams. OPERATIONAL/NON- OPERATIONAL MACHINE TEST* Operations’ tests without beam during normal running periods. OPERATIONAL PROTON PHYSICS Beam based operation aimed at proton physics. OPERATIONAL ION PHYSICS Beam based operation aimed at ion physics. OPERATIONAL TOTEM PHYSICS Beam based operation aimed at TOTEM. OPERATIONAL MACHINE DEVELOPMENT Beam based machine development. OPERATIONAL ACCESS* Access or preparation for said during beam operation. OPERATIONAL RECOVERY* Quench or cryogenics plant disturbance recovery during operation. OPERATIONAL Equipment is accessible by: 1. Outside the LHC CCC  Piquet ROLES 2. Inside the LHC CCC  Expert & LHC Operator ROLES 3 Equipment is accessible by: 1. Anywhere  Expert ROLES 2. Inside the LHC CCC  LHC Operator ROLE

4. What is a LHC Piquet Role? 4 EIC on shift

5. LHC Piquet Roles 09/06/20095 R. Alemany LHC Beam Commissioning Meeting Issue 1: if the intervention is finished before the expiration time, the TOKEN associated to the ROLE is still active  be careful. Issue 2: if one removes the user from the DB when the intervention is finished, the TOKEN associated to the ROLE is still active.  Currently the only way to be protected from this is to close the application that has been used to performed the intervention  More reliable solutions are being studied. NAME CONVENTION: XX-LHC-Piquet (e.g. BT-LHC-Piquet, PO-LHC-Piquet) No users in these roles except when needed

6. Relationship between LHC Operational Mode and Roles: IDCLASSNAMEPROPERTYDEVICENAMEDEVICEGRO UP ROLEAPPLIC ATION LOCATIONOPMODEACCESS ROLE 29126BLMLHCSettingHC.BLM.SR7.LBLM-LHC- DEV-GRP BI-BLM-Expert-LHC CCCOPERATIONALset 29127BLMLHCSettingHC.BLM.SR7.LBLM-LHC- DEV-GRP BI-BLM-Expert--NON- OPERATIONAL set 29128BLMLHCSettingHC.BLM.SR7.LBLM-LHC- DEV-GRP BI-LHC-Piquet--OPERATIONALset 29129BLMLHCSettingHC.BLM.SR7.LBLM-LHC- DEV-GRP LHC Operator-LHC CCC-set 09/06/20096 R. Alemany LHC Beam Commissioning Meeting (Device access map example) If nothing indicated = ANYWHERE/ANYMODE

7. Accelerator mode name DescriptionOP MODE SHUTDOWN Usual winter status. Cold magnets floating. NON-OPERATIONAL COOLDOWN* Coming back from shutdown. The principal activity during this mode is cryogenics related, i.e. simultaneous cool down of several sectors. NON-OPERATIONAL MACHINE CHECKOUT* Cold machine checkout periods following the yearly shutdown. The machine checkout is the final test to take place before the injection of first beam. NON-OPERATIONAL WARM-UP* One or more sectors warming up for repair. NON-OPERATIONAL SECTOR DEPENDENT NON-OPERATIONAL BEAM SETUP Machine commissioning with one or both beams. OPERATIONAL/NON- OPERATIONAL MACHINE TEST* Operations’ tests without beam during normal running periods. OPERATIONAL PROTON PHYSICS Beam based operation aimed at proton physics. OPERATIONAL ION PHYSICS Beam based operation aimed at ion physics. OPERATIONAL TOTEM PHYSICS Beam based operation aimed at TOTEM. OPERATIONAL MACHINE DEVELOPMENT Beam based machine development. OPERATIONAL ACCESS* Access or preparation for said during beam operation. OPERATIONAL RECOVERY* Quench or cryogenics plant disturbance recovery during operation. OPERATIONAL Here we should be flexible, machine is still under debugging When LHC Piquet Roles will be active? 7

8. During Beam Commissioning: 09/06/20098 R. Alemany LHC Beam Commissioning Meeting Beam Commissioning WITH Safe Beam: BIT 0BIT 1BIT 2BIT 3BIT 4BIT 5BIT 6BIT 7BIT 8 SECTOR12SECTOR 23SECTOR 34SECTOR 45SECTOR 56SECTOR 67SECTOR 78SECTOR 81BEAM OPERATION OPERATION AL NON- OPERATION AL Beam Commissioning WITH UNSafe Beam: BIT 0BIT 1BIT 2BIT 3BIT 4BIT 5BIT 6BIT 7BIT 8 SECTOR12SECTOR 23SECTOR 34SECTOR 45SECTOR 56SECTOR 67SECTOR 78SECTOR 81BEAM OPERATION OPERATION AL

9. Switching to RBAC STRICT What RBAC STRICT means? 1.You need a TOKEN which is provided by the client application 2.The token contains a ROLE with RULES: 1.To GET or MONITOR if there are no RULES defined then the command goes through, if there are RULES defined then they are taken into account. 2.To SET THERE MUST BE RULES DEFINED, otherwise access is denied. Then the rules are taken into account to grant access to the equipment. 09/06/2009 R. Alemany LHC Beam Commissioning Meeting 9

10. Switching to RBAC STRICT Preparation: FGC devices have been in STRICT since the end of Sep ‘08 Preparation: dry runs March ‘09 STRICT mode for PO, BI, BT and RF Preparation: June ’09 – Pierre meets the equipment experts to clean up the ROLES and RULES – Reyes makes sure all the CCC applications implement the RBAC integrator – Expert applications (Java, C++, LabVIEW, PVSS, ) going through CMW have to implement RBAC (via the integrator or custom way) 16 th June: dry run with HWC, QPS and CRYO to understand how the STRICT mode will affect them 09/06/2009 R. Alemany LHC Beam Commissioning Meeting 10

11. Switching to RBAC STRICT Dry Run: 14-15 th July ’09  the WHOLE LHC to STRICT. If successful  from the 15 th of July on we’ll work with RBAC STRICT 09/06/2009 R. Alemany LHC Beam Commissioning Meeting 11

12. LHC OPERATIONAL MODE LSA DB TIMING TELEGRAM OR LHC Sequencer How CMW gets the LHC OPERATIONAL MODE? 09/06/2009 R. Alemany LHC Beam Commissioning Meeting 12 CMW RBAC FESA FE CMW RBAC FESA FE CMW RBAC FESA FE CMW RBAC FESA FE CMW Server B0B1B2B3B4B5B6B7B8 111111110