Open StenGruener opened 2 years ago
"If Subject X has the Permission Read on the AAS itself, does this implicitly also apply Permission Read to all Submodels?"
No, this is not the case. The AAS just contains logical IDs of its submodels. If you want to access the submodels themselves you need to fetch the endpoint of a submodel via the registry. The submodel can have completely different access rights.
With respect to permissions: the metamodel does not predefine any permissions. Instead, it assumes that the permissions are defined in a submodel. This includes clear semantics of the permissions defined in this submodel like the one you ask: does write include read permission. Up to now there is no standardized submodel template for permissions.
The second question is not clear to me, do you mean APIs for accessing information at runtime?
You may be interested in this video from @aorzelskiGH on security with the Asset Administration Shell: https://youtu.be/CH_mguOJ0Ko
07.03.22: wait for @aorzelskiGH
@gillistephan any updates on your question after the meeting with Andreas on 31.1.? Something which might be valuable for the I4.0 community and can be posted in our Q&A list.
currently Chapter 7 of DotAAS is the only authoritative source
Discussed in https://github.com/admin-shell-io/questions-and-answers/discussions/63