Re: MIB

[Jon Saperia <saperia@mediaone.net>]

on 06/05/2000 9:50 AM, RJ Atkinson at rja@inet.org wrote:

> In short, the original proposal was that the MAX-ACCESS would be
> a function of what security mechanisms were implemented and
> hence were --AVAILABLE-- to the operator.

Sorry if my comment seemed a diversion. People have said is MAX-ACCESS and
DESCRIPTION clauses were not intended to do what you want and probably will
not produce the result you want - certain objects should only be modifiable
or in some cases only visible with certain levels of security.  This is a
function that the v3 model was intended to support and should be used for
that purpose. 

That said, I see no harm and only benefit in adding a sentence to the
DESCRIPTION clause (given the reality of how they are used) that says for
this object, it is recommended that it be read or written only with xyz
level of access. This is not a substitution for a well thought out security
section though. 

/jon