Versions Compared

Old Version 1

changes.mady.by.user Gill Houghton

Saved on

compared with

New Version 2

changes.mady.by.user Gill Houghton

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Prerequisites

  • Knowledge of Ignition and Module installation process: Cirrus Link Module Installation
  • Have Ignition 8.0.16 or greater installed
  • Have MQTT Engine 4.0.10 or later installed

Abstract

Access Control Lists (ACLs) control what topics a given username/password pair is allowed to publish and subscribe on.

...

ACLs should be designed with a 'principal of least privilege' model while also considering device management and maintenance.  For example gateways and devices in the field should be limited to publishing and subscribing only on the topics for which they should be expected to.  The same should be true of 'consumer' applications that will be either sending commands to devices in the field or consuming data coming from those devices.

...

It is also important to note that a username is not limited to a single MQTT client. 

...

If you are new to MQTT topics, the Eclipse Foundation's Paho project provides good information here on the basics of wildcards.

Definition

They are defined by the following format: [R|W|RW] topic where:

...

topic = The topic or wildcard topic representing the scope of the privilege

Examples

RW #

  • This allows clients connecting using this username/password to publish and subscribe on any topic

...

  • This allows clients connecting using this username/password to publish on device_one/temp/# and subscribe on state/# topics


Additional Resources