74
Access Control
ACCESS POLICY
Picolo.net products implement the default access policy that is recommended by the ONVIF 2.2
Core Specification.
The policy implements four user levels Administrator, Operator, User, and Anonymous.
Administrator, Operator, and Operator levels requires the user to be registered in the device user
database and to authenticate before to gain access to protected device services. Non-
authenticated users belongs to the Anonymous-level.
Anonymous-level users have only access to the services belonging to the following service class:
n
"PRE_AUTH" class: a set of service functions not requiring user authentication, for instance:
Device:GetCapabilities
,
Device:GetServices
...
In addition to the access rights of Anonymous-level users, User-level have access to the
following service classes:
n
The "READ_SYSTEM" class: a set of service functions reading the system configuration from
the device.
n
The "READ_MEDIA" class; a set of service functions reading the media configuration data.
In addition to the access rights of User-level users, Operator-level have access to the following
service class:
n
The "ACTUATE" class: a set a service functions affecting the runtime behaviour.
An Administrator-level user has access to all function classes. It has an exclusive access to the
following service classes:
n
The "READ_SYSTEM_SECRET" class: a set of service functions reading confidential system
configuration from the device.
n
The "WRITE_SYSTEM" class: a set of service functions causing changes to the system
configuration of the device.
n
The "UNRECOVERABLE" class: a set of service functions causing unrecoverable changes to
the system configuration of the device.
USER AUTHENTICATION
Picolo.net products implement the following user authentication mechanisms to control the
access to its resources:
n
HTTP and RTSP authentication using the "HTTP Digest Authentication" mechanism
n
WS authentication using the WS-Security “Username Token” mechanism, with the “Password
Digest” password type.
n
Web Pages through login/password dialog box.
Picolo.net
Handbook
Functional Specifications
