View Granularity Was:Re: SNMPv2 is a good thing.

[John Seligson <[e-mail]>]

Aleksey,

>> As it is stated in RFC 1445 the granularity
>> of the access control at object instance level is beyond
>> the scope of a SNMPv2 entity acting in agent role.
>> Let us consider this issue in more detail. Once a new
>> view had been created or old one had been  changed. The agent has to
>> check  this view against all its MIBs to insure that this view
>> does not impose object level granularity, otherwise this change
>> should be rejected.

Though RFC 1445 does indeed state, when refering to access control
granularity at the object instance level, that "such granularity is
considered beyond the scope of a SNMPv2 entity acting in an agent role",
it does not preclude this level of access or suggest that these types
of views should be rejected.  From my reading, it seems that object level
granularity is not required to claim compliance (RFC 1445 page 8) but is
useful in a number of situations.  The examples on page 32 even include
views with instance level granularity.  Thus, is it not an implementation
issue whether an agent wishes to deal with instance level views or not?

Also, could we please post discussions such as this to the snmp2 mailing
list where they seem more appropriate.  

John