I'll bump this to see if someone from TED knows if I can put the userid / password in the URLs that can be used to get data.
I only have the higher level pwd setting checked on because I was afraid that things like resetting settings or the ted itself could be done if I don't do that.
A ticket I put in (ticket 392 ) had a reply that with the config pwd only.. those things should not work.. but I was afraid to try it.
I will have to try it and hope there is some confirmation box to tell me when i'm about to hurt myself.. I will dump the cookies and then remove the overall pwd and just keep the config pwd protected.
In the meantime, I was hoping the id / pwd can be passed in the URL to get data remotely..