Re: partial locking and access control

[Phil Shafer <phil@juniper.net>]

Andy Bierman writes:
>The standard access control model in NETCONF is that every user has
>access to every part of every configuration database.

If every user had access to every part of the config, we wouldn't
need the "access-denied" error-app-tag.

There is no standard access control model in NETCONF.  Access
control is left to the implementation, which will hopefully
ape whatever's in the CLI.

Thanks,
 Phil

--
to unsubscribe send a message to netconf-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/netconf/>