Re: [OPSAWG] MUD draft 13 nit : Scope of ACL Name

"M. Ranganathan" <mranga@gmail.com> Thu, 26 October 2017 17:26 UTC

MIME-Version: 1.0
In-Reply-To: <6e4b760c-3a32-674c-de40-3481bf7ca2d7@cisco.com>
References: <CAHiu4JPkhNjXM9BtWcFoa5MzFavtdatX1g4uBu4M37E+nXqwaA@mail.gmail.com> <6e4b760c-3a32-674c-de40-3481bf7ca2d7@cisco.com>
From: "M. Ranganathan" <mranga@gmail.com>
Date: Thu, 26 Oct 2017 13:26:04 -0400
Message-ID: <CAHiu4JNHGj-A_-3DfxANhtjtW60fkfPuBKq-rXv-H73wpOYO_A@mail.gmail.com>
To: Eliot Lear <lear@cisco.com>
Cc: opsawg@ietf.org
Content-Type: multipart/alternative; boundary="001a114cb408f48a4d055c7679e4"
Archived-At: <https://mailarchive.ietf.org/arch/msg/opsawg/FnETHThlTD3zGVuJymq9nKglo-U>
Subject: Re: [OPSAWG] MUD draft 13 nit : Scope of ACL Name
Precedence: list

On Thu, Oct 26, 2017 at 1:14 PM, Eliot Lear <lear@cisco.com> wrote:

> The acl name comes directly from draft-ietf-netmod-acl.  However, if it is
> not clear, the scope is intended to be solely within a MUD file itself.  I
> can add words to that effect as part of LC if nobody objects.
>
> Eliot
>


Hi Eliot:

I had mean to suggest the following change:



       leaf acl-name {
             type leafref {
               path "/acl:access-lists/acl:acl/acl:acl-name";
             }
             description
               "The name of the ACL for this entry.The name is
                scoped ONLY to the MUD file, and may not be unique
                in any other circumstance.";
            }
            leaf acl-type {
             type identityref {
               base acl:acl-base;
             }
             description
               "The type of the ACL for this entry.  ";
           }

However, I have a suggested change to the naming scheme :


I would like to suggest that an ACL name be directly derived from a a
MUD URL instead of scoping it this way (so that it can be specified
independently of the MUD file while achieving the scoping goal you had
in mind).

That would ease the pain of implementation.

Can you make this a requirement?

Thanks,

Ranga.


> On 10/26/17 7:12 PM, M. Ranganathan wrote:
>
>          leaf acl-name {
>              type leafref {
>                path "/acl:access-lists/acl:acl/acl:acl-name";
>              }
>              description
>                "The name of the ACL for this entry.";
>            }
>            leaf acl-type {
>              type identityref {
>                base acl:acl-base;
>              }
>              description
>                "The type of the ACL for this entry.  The name is
>                 scoped ONLY to the MUD file, and may not be unique
>                 in any other circumstance.";
>            }
>
>
>
>
>
>
> This is a nit (perhaps has already been reported):
>
> Does the description comment on scope belong with the acl-name node?
>
> Thanks
>
> --
> M. Ranganathan
>
>
> _______________________________________________
> OPSAWG mailing listOPSAWG@ietf.orghttps://www.ietf.org/mailman/listinfo/opsawg
>
>
>


-- 
M. Ranganathan

[OPSAWG] MUD draft 13 nit : Scope of ACL Name M. Ranganathan
Re: [OPSAWG] MUD draft 13 nit : Scope of ACL Name Eliot Lear
Re: [OPSAWG] MUD draft 13 nit : Scope of ACL Name M. Ranganathan
Re: [OPSAWG] MUD draft 13 nit : Scope of ACL Name Eliot Lear
Re: [OPSAWG] MUD draft 13 nit : Scope of ACL Name M. Ranganathan
Re: [OPSAWG] MUD draft 13 nit : Scope of ACL Name Einar Nilsen-Nygaard (einarnn)