Tags are managed entirely server side, so there's no priv esc issues. This lets my devices do what they want, and server style devices can't do anything.
13 lines
190 B
JSON
13 lines
190 B
JSON
{
|
|
"tagOwners": {
|
|
"tag:client": []
|
|
|
|
},
|
|
"acls": [
|
|
{
|
|
"action": "accept",
|
|
"src": ["tag:client"],
|
|
"dst": ["*:*"]
|
|
}
|
|
]
|
|
}
|