docs(index): OtOpcUa node ACLs are now enforced behind Security:Acl:Enabled (#520 stage 5)
Default is off, so a read-only address-space consumer is unaffected. With it on, writes / alarm acks / HistoryRead need a matching grant for the principal the session authenticates as — anonymous unless ScadaBridge is issued a key. Reads, browses and subscriptions stay ungated in both modes. Claude-Session: https://claude.ai/code/session_015p7wGqy3YpZNCpDzTpGMKo
This commit is contained in: