Prohibit "Set Force" from faceplate for operators
How to prohibit operators forcing input/output value from the operator faceplate?
I've denied "Force I/O" and "Force SFC" from System configuration console / security / default security settings but operators still able force the channels. What's a purpose of "Force I/O" and "Force SFC" then.
Voted best answer
These Roles are defined in the Aspect System, however to "Operate" something from Graphics or Faceplates, the OPC Properties themselves are written via the OPC Server directly which does only check for the Roles as defined on each Property - visible by Right-Click on any Object -> Details... -> Property View -> Write Permission. The default for any OPC write operation is just this "Operate" Role...
To inhibit forcing a Value from the Faceplate, you'll therefore need to make sure that writing the Value Property (e.g. <RealIO>.Value and probably also <RealIO>.Forced) needs e.g. the "Force I/O" Role. If this is not your own Function Block, you can use the "Property Attribute Override" Aspect on the Object to overwrite the settings.
Note that it also depends on the Faceplate (i.e. the Library used) if the Force operation writes directly to these Properties or there are other Properties used with some code in the Controller handling the details (like InteractionPar.<ForceSomething>) - so you need to find out where to apply the Write Permission first.
I can answer your question in two cases:
Force option to be disabled in systems from standard face plates use function ResetForce in application. ( None will be able to force)
In second case if some set of operators / engineers only need to access force IO, then make security settings : Force I/O access or denied accodingly.