Enable Anonymous Access - no login required?

[martinb]

Is there an option to enable Anonymous Access? Another words, get no prompts for user/password (this applies to REST and/or Web interface access). If not, could this be added to as a possible future enhancement? I checked all over the place with no luck finding any info on this...

 

Regards,

Martin

[Michel Kohanim]

Hi Martin,

 

No and we have resisted very hard in supporting this feature! This is especially crucial since ISY can arm/disarm ELK security systems and we would basically be opening a security hole.

 

With kind regards,

Michel

[martinb]

Certainly maintaining security is very important and I agree with you. May I propose an option that could provide a possible solution? Could you add an IP or MAC filtering feature that would simply bypass authentication based on the connection source address? With that we could simply list trusted devices that would never be prompted for authentication. Please, please consider…

 

Regards,

Martin

[Michel Kohanim]

Hi Martin,

 

That would be even worse since packets can be spoofed and have their MAC address/source address changed.

 

Now, can you tell me what specific functions within ISY would you like to be able to control without login? If it's only a subset of everything that you can do from the Admin Console, then the best solution would be to have multi-level user authorization (i.e. admin, guest, etc.) which we have already planned.

 

If you want a blanket No credentials for all requests, then unfortunately, I do not think we would be able to support it.

 

With kind regards,

Michel

[martinb]

I think multi-level access permissions are great idea. I hope the Guest level would not require authentication and would have access to basic features. For my specific situation, I am looking for lighting control flexibility using REST calls.

 

Regards,

Martin

[Michel Kohanim]

Hi Martin,

 

Noted and thanks so very much for the feedback.

 

With kind regards,

Michel