A method for defining additional resources in a user management system in a manufacturing execution system, the system including at least one server and at least one client connected via a network connection, the server having a users and groups database and a scripts file repository, the client having an access database containing capabilities of currently logged users, and wherein a local user management service at the client and a centralized user management service at the server are in communication via the network connection, the method which comprises:
- a) at run time, at a given event,
- transmitting from the centralized user management service to the local user management service data on the logged user obtained from the users and groups database and data on a first set of scripts from the scripts file repository;
- in turn, creating with the local user management service, by also using data on a user global resources built in an in-house product, related entries into the access database and executing the set of scripts;
- b) providing a custom resource database at the server side with entries editable at engineering time or at run time;
- c) at engineering time or at run time, requesting with a client application, via the local user management service, that an additional resource be defined as a custom resource, from the centralized user management service, and adding with the centralized user management service an entry related to the requested custom resource in the custom resource database;
- d) at run time, at a given event:
- transmitting from the centralized user management service, in addition transmitting the data of step a), to the local user management service, additional data from the custom resource database concerning the custom resources associated with the user and user groups as well as additional data on a second set of script files associated to the custom resources;
- and
- in turn, creating with the local user management service also with the additional data the related entries into the access database and executing the second set of scripts.