allow to enable or disable remote admin

opcua/internal_server.py

@@ -37,6 +37,7 @@ class InternalServer(object):
         self.logger = logging.getLogger(__name__)
         self.endpoints = []
         self._channel_id_counter = 5
+        self.allow_remote_admin = True
 
         self.aspace = AddressSpace()
         self.attribute_service = AttributeService(self.aspace)
@@ -168,7 +169,7 @@ class InternalSession(object):
         self.state = SessionState.Activated
         id_token = ua.downcast_extobject(params.UserIdentityToken)
         if id_token.TypeId == ua.FourByteNodeId(ua.ObjectIds.UserNameIdentityToken_Encoding_DefaultBinary):
-            if id_token.UserName in ("admin", "Admin"):
+            if self.iserver.allow_remote_admin and id_token.UserName in ("admin", "Admin"):
                 self.user = User.Admin
         return result
 

opcua/server.py

@@ -59,6 +59,12 @@ class Server(object):
         sa_node = self.get_node(ua.NodeId(ua.ObjectIds.Server_ServerArray))
         sa_node.set_value([self.server_uri])
 
+    def allow_remote_admin(self, allow):
+        """
+        Enable or disable the builtin Admin user from network clients
+        """
+        self.iserver.allow_remote_admin = allow
+
     def set_endpoint(self, url):
         self.endpoint = urlparse(url)