Re: Netconf! Part Deux

[Phil Shafer <phil@juniper.net>]

Wes Hardaker writes:
>It's entirely likely it'll make access control mechanisms harder to
>implement as well [you can't simply check the entire incoming chunk
>against an automated access control validation service...  You'll
>likely have to ask the low level code for help].

But there's already plumbing in the CLI to handle this sort of
token-by-token access control since you need it for command
completion.  We leverage that directly.  If you can't say
"set protocols bgp disable", then you can't use <edit-config>
to achieve the same ends.

Thanks,
 Phil

--
to unsubscribe send a message to netconf-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/netconf/>