Michael Sweet Jan 4, 2024

I opted to use an access rights paragraph that explicitly mentions the parallels to Get-Printer-Attributes and used the declarative form:

Access Rights: The Get-System-Attributes operation is not limited to particular class or role and, like the Get-Printer-Attributes operation [STD92], is intended as an open means of discovering System capabilities and status, and such requests are not authenticated to or filtered for particular End Users.

Smith Kennedy Oct 7, 2020

The definition of the Get-System-Attributes operation on page 70 (http://ftp.pwg.org/pub/pwg/candidates/cs-ippsystem10-20191122-5100.22.pdf#page=70) doesn't clearly state whether the System object can or must not challenge the Client for authentication. It has been asserted that the semantics of the Get-System-Attributes operation should match Get-Printer-Attributes in that the System object MUST NOT challenge a Client for authentication in response to a Get-System-Attributes operation request.

Add text to clarify the expectations, such as "The System MUST NOT challenge the Client for authentication in response to a Get-System-Attributes request."