>>  - Lock down API access for unprivileged users

> Could this have unexpected consequences?

> Non-admin users does now get an Ajax error when viewing ports on a device.

Yes, it did. We realized that the frontend calls the 'interface' endpoint of

the API when populating the port table.

We have opened a pull request that will fix this problem: 

https://github.com/Uninett/nav/pull/3373 and we are planning on making a bugfix

release with this fix as soon as possible.

--
Sincerely,
Johanna England

Sikt – Norwegian Agency for Shared Services in Education and Research