Re: [netmod] Alternative approach to draft-ma-netmod-immutable-flag-00
Andy Bierman <andy@yumaworks.com> Wed, 23 March 2022 23:13 UTC
Return-Path: <andy@yumaworks.com>
X-Original-To: netmod@ietfa.amsl.com
Delivered-To: netmod@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2EBDF3A0EE9 for <netmod@ietfa.amsl.com>; Wed, 23 Mar 2022 16:13:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.797
X-Spam-Level:
X-Spam-Status: No, score=-1.797 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, SPF_HELO_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yumaworks-com.20210112.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vHqYZnH50fSY for <netmod@ietfa.amsl.com>; Wed, 23 Mar 2022 16:13:44 -0700 (PDT)
Received: from mail-yw1-x112d.google.com (mail-yw1-x112d.google.com [IPv6:2607:f8b0:4864:20::112d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6F2693A0EC2 for <netmod@ietf.org>; Wed, 23 Mar 2022 16:13:44 -0700 (PDT)
Received: by mail-yw1-x112d.google.com with SMTP id 00721157ae682-2e68c95e0f9so34795627b3.0 for <netmod@ietf.org>; Wed, 23 Mar 2022 16:13:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yumaworks-com.20210112.gappssmtp.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=svPcr1mv4kTeBdOa+5uMhvAa/LDGRWseOhx/VRX+abs=; b=3fNyJvHDwZGAcDspre4/xSScc2zx/sdnXz0igmJIl78r/sqcF6SV8PmCa8AdBXYifu tdNZwCZgBBytoUfO6+0GUtX/OtDFyfTm8PcW5n7qiPnnJSkGGtREszmkTi8sVi35mDV8 ION3QZSx/+nrHspWvCnDJxSCY8MWoZuJ/qejxnrHJRp8i8815JYPQRc0DGwWhPJLBrcj VpaqaZDecv706oNE+ZO0JUgYLGYPxTviJY/0XqKELfjfB8+JC6ujyKzoWbutFAISfZLy g33d/tl5XrrjWKEfB1RMp7w2r7S8QduAV8rW2IpVOe7LyQUCko53u6v4Oaa0pEZ1oBUI pUHQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=svPcr1mv4kTeBdOa+5uMhvAa/LDGRWseOhx/VRX+abs=; b=wucANmtgWTF6J8Be4Z99xABzGROaWXqTSeB4Xua22YzYQjxNhWy9pPczHLk4IiSAnq oJ6IrzAC/yzb+an1kcB0O+7IiwIOzDLXuKGdMGRbEKfuPMODPd6bpeFVzW6B0we7AORo 0yZApROjIP6o61Fsggtu05NHJ6F0H8HkXJ6cFxYo4voIuHqWPl+xAUJHP/r9TwwArDzy 6AG1LcJzJrsUtAwhUwbE5SNktRPC13EjYPBz+xEGhHMr5+YlbX4EE5VpTf0qoO4tdkWO FsBh7uGF+1Aan9luJhc89Wb/3shUEKOkiLlIvefLDcsPWe7/k6PA6kXCbzxzaUQk3Oqr q3tA==
X-Gm-Message-State: AOAM5330jkBILez6DG4Kta1s0hwIMd6iL7dsrPLl0OuQ1fFQM1Tt+Lur 4QwGPzJZTQz51sv37cZIsT6BNsAHp3ewTwQlOKStksJ8/4Q=
X-Google-Smtp-Source: ABdhPJx6E8S/xieh4Upa9xQWPVWP/DSlO+6Zjgbvx2hS1wiwLQguAk+N/bt3yDVZf6r+pVysoDZBP7/4KP544lXorW0=
X-Received: by 2002:a81:78f:0:b0:2e5:bf12:5edc with SMTP id 137-20020a81078f000000b002e5bf125edcmr2347335ywh.433.1648077222718; Wed, 23 Mar 2022 16:13:42 -0700 (PDT)
MIME-Version: 1.0
References: <CABCOCHRqZgCfH0j5XnEt0aK0fwVCaxe_aSHCAZn3jb0QLrDuKw@mail.gmail.com> <VI1PR0701MB2351A430BA5F2EEFE96CE094F0189@VI1PR0701MB2351.eurprd07.prod.outlook.com> <CABCOCHSY6CN7Xf05RtTF0jm1S6gLd1umr5BtG3pkkeCBu47Jyw@mail.gmail.com> <VI1PR0701MB23518B3F1FB9EE3EE32C9FDAF0189@VI1PR0701MB2351.eurprd07.prod.outlook.com>
In-Reply-To: <VI1PR0701MB23518B3F1FB9EE3EE32C9FDAF0189@VI1PR0701MB2351.eurprd07.prod.outlook.com>
From: Andy Bierman <andy@yumaworks.com>
Date: Wed, 23 Mar 2022 16:13:31 -0700
Message-ID: <CABCOCHT5D3=cZR=f86FiCQ48=1Enqwi+-eyR3Y-xSE37_cyvzA@mail.gmail.com>
To: Balázs Lengyel <balazs.lengyel@ericsson.com>
Cc: NetMod WG <netmod@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000006c4a7805daeae12b"
Archived-At: <https://mailarchive.ietf.org/arch/msg/netmod/jDxjQ2sL0nuPa748afh-xjUugfU>
Subject: Re: [netmod] Alternative approach to draft-ma-netmod-immutable-flag-00
X-BeenThere: netmod@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETMOD WG list <netmod.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netmod>, <mailto:netmod-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netmod/>
List-Post: <mailto:netmod@ietf.org>
List-Help: <mailto:netmod-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netmod>, <mailto:netmod-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 23 Mar 2022 23:13:50 -0000
On Wed, Mar 23, 2022 at 3:06 PM Balázs Lengyel <balazs.lengyel@ericsson.com> wrote: > > > > > *From:* Andy Bierman <andy@yumaworks.com> > *Sent:* Wednesday, 23 March, 2022 22:32 > *To:* Balázs Lengyel <balazs.lengyel@ericsson.com> > *Cc:* NetMod WG <netmod@ietf.org> > *Subject:* Re: [netmod] Alternative approach to > draft-ma-netmod-immutable-flag-00 > > > > > > > > On Wed, Mar 23, 2022 at 2:16 PM Balázs Lengyel < > balazs.lengyel@ericsson.com> wrote: > > Hello Andy, > > I also propose an extension. (see my mail Review of > draft-ma-netmod-immutable-flag-00) > > In Ericsson we saw no need for exceptions, but do see the need for > applying it to descendant nodes. Typically we need to protect a full > subtree. > > > > Why do you need the exceptions? Could you provide some use-case examples ? > > > > I think create/delete-only and modify-only access modes are used the most, > after no-access. > > BALAZS: How is a modify-only data-node different from a mandatory > data-node? It must be there but can be changed. It get’s an initial value > somehow. > Mandatory=true requires the system to provide a value. Modify-only allows the system to decide when an instance is created. > BALAZS: Any examples when would a create/delete only data node be used? > Sometimes developers do not want to write complex instrumentation that supports modification of resources. Instead a user has to delete the old entry and create a new one with (potentially) different parameters. > > Applying to descendant nodes may be better, or may require more work to > > undo the extension used in an ancestor node. This impacts the extension > usage within a grouping. > > > > BALAZS2: I did not include it in my mail, but we actually have one more > rule: > > “Top level statements in augment or groupings do NOT inherit > > the static-data value from containing nodes, they default to > > static-data false.” > > > This seems complicated to users and developers to track how the final schema tree was derived. The 'static-data' extension seems fine to me. We have to support 'user-write' anyways, so it is better if it is not too close to this extension. Things that seem the same, but are NOT the same cause the most support tickets. > > Regards Balazs > > > > Andy > Andy > > > > > *From:* netmod <netmod-bounces@ietf.org> *On Behalf Of *Andy Bierman > *Sent:* Wednesday, 23 March, 2022 21:10 > *To:* NetMod WG <netmod@ietf.org> > *Subject:* [netmod] Alternative approach to > draft-ma-netmod-immutable-flag-00 > > > > Hi, > > > > IMO the problem should be viewed as a refinement to the > > access control policy of the device. A standard mechanism > > such as a YANG extension would be better than a growing > > mix of proprietary solutions. > > > > We have such a YANG extension called "user-write" that is widely deployed. > > A simple boolean is not fine enough granularity, so a bits type is > > needed instead to allow control of create, update, and delete access > operations. > > > > > > > https://www.yumaworks.com/pub/latest/yangauto/yumapro-yangauto-guide.html#ncx-user-write > <https://protect2.fireeye.com/v1/url?k=31323334-501d5122-313273af-454445555731-876c03f0bc610d95&q=1&e=c875257e-41f5-45d6-a9e9-871e5ebb4243&u=https%3A%2F%2Fwww.yumaworks.com%2Fpub%2Flatest%2Fyangauto%2Fyumapro-yangauto-guide.html%23ncx-user-write> > > > > > > Andy > > > >
- [netmod] Alternative approach to draft-ma-netmod-… Andy Bierman
- Re: [netmod] Alternative approach to draft-ma-net… Balázs Lengyel
- Re: [netmod] Alternative approach to draft-ma-net… Andy Bierman
- Re: [netmod] Alternative approach to draft-ma-net… Balázs Lengyel
- Re: [netmod] Alternative approach to draft-ma-net… Kent Watsen
- Re: [netmod] Alternative approach to draft-ma-net… Balázs Lengyel
- Re: [netmod] Alternative approach to draft-ma-net… Andy Bierman
- Re: [netmod] Alternative approach to draft-ma-net… maqiufang (A)
- Re: [netmod] Alternative approach to draft-ma-net… Andy Bierman
- Re: [netmod] Alternative approach to draft-ma-net… Balázs Lengyel
- Re: [netmod] Alternative approach to draft-ma-net… Balázs Lengyel
- Re: [netmod] Alternative approach to draft-ma-net… Andy Bierman
- Re: [netmod] Alternative approach to draft-ma-net… Balázs Lengyel