Re: [NGO] access control

Andy Bierman <ietf@andybierman.com> Wed, 19 March 2008 15:02 UTC

Return-Path: <ngo-bounces@ietf.org>
X-Original-To: ietfarch-ngo-archive@core3.amsl.com
Delivered-To: ietfarch-ngo-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id F23BA28C623; Wed, 19 Mar 2008 08:02:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -100.633
X-Spam-Level:
X-Spam-Status: No, score=-100.633 tagged_above=-999 required=5 tests=[AWL=-0.196, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_ORG=0.611, RDNS_NONE=0.1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kMYltEwca8Mo; Wed, 19 Mar 2008 08:02:47 -0700 (PDT)
Received: from core3.amsl.com (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5FE7D28C62C; Wed, 19 Mar 2008 08:02:32 -0700 (PDT)
X-Original-To: ngo@core3.amsl.com
Delivered-To: ngo@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8C15328C676 for <ngo@core3.amsl.com>; Wed, 19 Mar 2008 08:02:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PCnE1guNuLt7 for <ngo@core3.amsl.com>; Wed, 19 Mar 2008 08:02:21 -0700 (PDT)
Received: from smtp124.sbc.mail.sp1.yahoo.com (smtp124.sbc.mail.sp1.yahoo.com [69.147.64.97]) by core3.amsl.com (Postfix) with SMTP id B34ED28C73B for <ngo@ietf.org>; Wed, 19 Mar 2008 08:01:45 -0700 (PDT)
Received: (qmail 25194 invoked from network); 19 Mar 2008 14:59:28 -0000
Received: from unknown (HELO ?127.0.0.1?) (andybierman@att.net@67.126.242.5 with plain) by smtp124.sbc.mail.sp1.yahoo.com with SMTP; 19 Mar 2008 14:59:27 -0000
X-YMail-OSG: 8YlxKp0VM1mYaj3P_4w6SoSway8DEYx9I4VLblod2isRro3U
X-Yahoo-Newman-Property: ymail-3
Message-ID: <47E12A4D.2070600@andybierman.com>
Date: Wed, 19 Mar 2008 07:59:25 -0700
From: Andy Bierman <ietf@andybierman.com>
User-Agent: Thunderbird 2.0.0.12 (Windows/20080213)
MIME-Version: 1.0
To: Andy Bierman <ietf@andybierman.com>, David B Harrington <dbharrington@comcast.net>, 'NETCONF Goes On' <ngo@ietf.org>
References: <012e01c88919$53aa3330$6c02a8c0@china.huawei.com> <47E027E5.6080502@andybierman.com> <20080319091145.GB24284@elstar.local> <47E0FB33.2030909@andybierman.com> <20080319125529.GD24469@elstar.local>
In-Reply-To: <20080319125529.GD24469@elstar.local>
Subject: Re: [NGO] access control
X-BeenThere: ngo@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: NETCONF Goes On - discussions on future work and extensions to NETCONF <ngo.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ngo>, <mailto:ngo-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/pipermail/ngo>
List-Post: <mailto:ngo@ietf.org>
List-Help: <mailto:ngo-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ngo>, <mailto:ngo-request@ietf.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: ngo-bounces@ietf.org
Errors-To: ngo-bounces@ietf.org

Juergen Schoenwaelder wrote:
> On Wed, Mar 19, 2008 at 04:38:27AM -0700, Andy Bierman wrote:
>  
>> I doubt vendors will accept a new standard DML every time
>> the IETF wants to add 'one more clause'.  I think it will be very
>> difficult to introduce new versions of the DML.
> 
> Lets simply disagree on this. I believe extensibility of a DML is much
> like extensibility of a protocol a good thing.
> 

The vendors participating in SMING made it very clear
that supporting multiple versions of the the SMI would
be too expensive to be worth it.


>>> Andy, why do you not get a team together to work out a decent access
>>> control proposal? This would be forward progress...
>> Because I already posted a draft on access control (as did 4 or 5
>> others) and they were all ignored, so I'm pretty sure that's what
>> would happen again.
> 
> Do you seriously believe the many complaints you post here are going
> to change that? Perhaps it is time to revise / integrate drafts and to
> try again. This would be a more constructive approach to make
> progress.
> 

I am not trying to work on access control now, just trying
to understand the requirements.

Several people have noted that a development approach for a
data modeling language should consider many (if not all)
aspects of system design.

There will be many opportunities for reviewing and changing
the DML.  I may propose changes to the DML to support access control
configuration and enforcement.

I expect that any and all DML features are on the table for discussion
and access control is not special in that regard.


> /js
> 

Andy


_______________________________________________
NGO mailing list
NGO@ietf.org
https://www.ietf.org/mailman/listinfo/ngo