Forum Discussion
ACL on iControl interfaces.
Hi,
I am an application developer, trying to create remote requests to update BIG-IP. Recently, I realize that iControl requires a full read and write access priviledged account access...
In 4.x, only users with iControl privileges are allowed iControl access. This access check happens when the client request comes through the CORBA Portal, and the access check is based on the user's privileges, not on what method is being called. So if the user has iControl privileges, the user will be allowed iControl access, regardless of whether he/she is querying or modifying.
In 9.x, our authorization access check has been reworked to use a combination of the user's role and what method is being invoked.
Regards,
Loc
