Details
Minor
Description
The attribute protection policy can be modified on a per-attribute basis by means of packet based services modifying the PROTECTED flag of particular attributes.
This feature is integrated poorly for some objects, e.g. the assembly object. A modified PROTECTED flag will not have any effect on the attributes of this object.
For a particular use case evolving around explicit device protection when having configuration assembly data in the protection policy, this shall be overcome specifically for attribute 3 of config assemblies as follows:
1) The attribute can be added to the protection policy.
2) When the device protection is active, explicit (Set_Attr_Single) access to the attribute shall then be rejected (DEV_IN_WRONG_STATE).
3) Implicit set access towards a config assembly due to a FwOpen with configuration data shall not respect the PROTECTED flag, but always present the new configuration data to the host application (EIP_OBJECT_CL3_SERVICE_REQ), for the application to still decide flexibly.
No changes are intended for any other assembly types rather than configuration assemblies and attributes. The fix will not fully integrate the PROTECTED feature with the assembly object.
