Configuring Access To and From Other G2, G2 Gateway, and Telewindows Processes

Type of Access	Short Description	Relevant Items or Classes
`access to`	Permits or denies access to any item from other G2 processes, G2 Gateway, or Telewindows.	Items of any user- or system-defined class.
`read`	Other G2 processes can use items in the current KB as a source of data service for variables in their own current KBs. Not applicable to G2 Gateway or Telewindows.	KB-wide, items of any system-defined class, or items of any user-defined class
`write`	Other G2 processes can set a new current value of a variable of a user-defined class. Not applicable to G2 Gateway or Telewindows.	KB-wide, variables of user-defined classes that mix in either the `G2-TO-G2-DATA-SERVICE` or `GSI-DATA-SERVICE` class
`execute`	Other G2 processes or G2 Gateway bridge processes can call a G2 procedure in the current KB.	Items of the `PROCEDURE` class
`inform`	Other G2 processes can target an `inform` action on a variable of a user-defined class.	Items of user-defined classes that mix in the `G2-TO-G2-MESSAGE-SERVICE` class. Though the editor permits you allow or prohibit inform access to or from G2 Gateway, such access is inappropriate, because there is no way for G2 Gateway to inform a G2 process.
`connect`	Other G2 processes, G2 Gateway and Telewindows processes can connect to this G2 process.	KB-wide only: Include a `setup network access as follows` configuration statement only in the `Item-configuration` attribute of the KB Configuration system table.

Allowing or Prohibiting Network Access

	set up network access as follows : 
		 connect access by g2 and gsi and telewindows

	set up network access as follows : 
		prohibit connect access by g2 and gsi and telewindows

Note: G2 does not allow this configuration statement in any other Item-configuration or Instance-configuration attribute.

	set up network access as follows : 
		prohibit read or write access to any vehicle by g2

	set up network access as follows : 
		prohibit execute access to update-vehicle-direction 
		    by g2 and gsi

Note: Prohibiting execute access on a rule that can be activated by forward chaining from a variable does not stop the rule from firing. To do this, you must instead declare a configuration that prohibits access to the variable.

	set up network access as follows : 
		prohibit inform access to any custom-message-receiving-variable 
		    by g2

	set up network access as follows : 
		allow connect access by g2 and telewindows

Note: Because connect access does not apply to particular items, G2 does not support the absolutely keyword for this phrase.