Re: Access control

[Martin Bjorklund <mbj@tail-f.com>]

Balazs Lengyel <balazs.lengyel@ericsson.com> wrote: 

> I want just read, write controls still I don't know how to handle
> the merge example.

I agree that you need info from the datastore in your example:

> <edit-config operation=merge>
>    <top>
>      <interface-eth0>
>        <adminstate>Up</adminstate>
>      </interface-eth0>
>    </top>
> </edit-config>

since the merge on <interface-eth0> will create it if it doesn't
exist.

I don't see the big problem though.

As an alternative, you could deny the merge request if the user
doesn't have write access, and force her to use explicit operations.


/martin

--
to unsubscribe send a message to netconf-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/netconf/>