Re: Access control

[Phil Shafer <phil@juniper.net>]

Balazs Lengyel writes:
>Does this mean, that in your opinion it is NOT Possible to do access control without the
>information: what is stored already in the datastore?

You shouldn't need the datastore to do access control, but you
might need the schema and the user's permissions.  In JUNOS, we
try to leverage the normal CLI permissions, so if you can't
touch it (or view it) via the CLI, you can't touch/view it in
the API.  The schema that defines the data store contains
this access information, so both the CLI, the API, the web goo,
and whatever else can eat your schema will be able to understand
and enforce your permission scheme.

Thanks,
 Phil

--
to unsubscribe send a message to netconf-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/netconf/>