{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/distinguish-an-axis-on-screen-option-from-its-device-operation/", "item": { "id": "https://update.dsesecurity.com/updates/distinguish-an-axis-on-screen-option-from-its-device-operation/", "slug": "distinguish-an-axis-on-screen-option-from-its-device-operation", "url": "https://update.dsesecurity.com/updates/distinguish-an-axis-on-screen-option-from-its-device-operation/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/distinguish-an-axis-on-screen-option-from-its-device-operation.md", "json": "https://update.dsesecurity.com/api/v1/posts/distinguish-an-axis-on-screen-option-from-its-device-operation/" }, "title": "Distinguish an Axis on-screen option from its device operation", "summary": "Treat Axis on-screen feature visibility as a presentation decision. Verify the underlying device operation separately instead of using a missing control as proof that hardware is disabled.", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "advisory", "name": "Advisory" }, "featured": false, "image": { "theme": "physical-security", "label": "Physical security", "alt": "Integrated video surveillance and controlled entry at a modern commercial facility.", "card_url": "https://update.dsesecurity.com/assets/editorial/physical-security-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/physical-security-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/physical-security-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" }, { "slug": "video-surveillance", "name": "Video Surveillance", "url": "https://update.dsesecurity.com/topic/video-surveillance/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-10-29T19:49:52+00:00", "modified_at": "2026-10-29T19:50:08+00:00", "reviewed_on": "2026-10-29", "reading_minutes": 3, "word_count": 503, "potentially_affected": "Axis products exposing the documented On-screen controls interface; confirm actual device, hardware and software applicability before applying the proposed checks.", "dse_recommendation": "DSE recommends recording presentation and device-operation requirements as separate acceptance items.", "primary_source": { "name": "Axis Communications — On-screen controls", "url": "https://developer.axis.com/vapix/network-video/on-screen-controls/", "published_on": null, "authority": "Axis Communications" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Bottom line: Review a feature’s visibility separately from its operational state. When an on-screen option is hidden, require the appropriate device-operation evidence before claiming that the underlying function has been disabled.

\n

Source fact: documented behavior

\n

Axis’s On-screen controls provides feature descriptions through its CGI and includes separate operations for displaying or hiding a feature’s enable/disable option.

\n

The show/hide example does not require removing the feature; a disabled feature is omitted from the response to a feature request.

\n

What the source does not establish

\n

Do not accept an absent button or feature-list entry as sufficient proof of the hardware’s state. Do not infer that hiding a control changes account permissions or blocks another management interface. Confirm the exact application and product support, and keep visibility policy separate from the approved procedure for changing the device function.

\n

Applicability questions

\n\n

DSE recommendation: controlled next steps

\n

The following steps are DSE recommendations based on the cited source.

\n

DSE recommends recording presentation and device-operation requirements as separate acceptance items.

\n
    \n
  1. Write the intended outcome before choosing an API method. For a presentation change, identify the client, feature description and users whose view should change. For an operational change, obtain the exact device function’s supported procedure and an independent state observation. Do not turn an interface cleanup request into an undocumented hardware configuration change.
    2. \n
  2. Capture the current feature response and the permitted client view. Apply only the approved on-screen visibility operation through its supported interface, then retrieve the feature response and inspect the client again. Record which option is present or absent. Avoid naming the result hardware disabled unless the separately approved operation and observation establish that conclusion.
    3. \n
  3. If the task includes changing the underlying function, perform that as its own authorized step and retain its evidence independently of the visibility change. Review other permitted management paths with the responsible owner when access restrictions are part of the requirement. Resolve any mismatch between presentation, operational state and access policy instead of treating a hidden control as a substitute for those checks.
    4. \n
\n

Verification and evidence

\n

Retain the feature name, before-and-after description responses, approved visibility action and permitted client screenshots. Keep any independent device-state result alongside its own supported operation. Ask another reviewer to identify exactly what the on-screen evidence proves and what remains untested.

\n

Use a proposed desk case in which an operator closes a hardware-disable request with only a screenshot of a missing button. Require the reviewer to request the missing operational evidence. These checks do not report a tested device state or establish a security boundary across every management path.

\n

Official references

\n\n

Source review completed October 29, 2026. Recheck the official documentation and the deployed device’s capabilities before changing production settings.

\n", "content_text": "Bottom line: Review a feature’s visibility separately from its operational state. When an on-screen option is hidden, require the appropriate device-operation evidence before claiming that the underlying function has been disabled.\nSource fact: documented behavior\nAxis’s On-screen controls provides feature descriptions through its CGI and includes separate operations for displaying or hiding a feature’s enable/disable option.\nThe show/hide example does not require removing the feature; a disabled feature is omitted from the response to a feature request.\nWhat the source does not establish\nDo not accept an absent button or feature-list entry as sufficient proof of the hardware’s state. Do not infer that hiding a control changes account permissions or blocks another management interface. Confirm the exact application and product support, and keep visibility policy separate from the approved procedure for changing the device function.\nApplicability questions\n\nIs the request to hide an option or to change an actual device operation?\nWhich on-screen feature name and client presentation are in scope?\nWhich supported operation and observation establish the underlying function’s state?\nWho approves the visibility policy and any separate operational change?\n\nDSE recommendation: controlled next steps\nThe following steps are DSE recommendations based on the cited source.\nDSE recommends recording presentation and device-operation requirements as separate acceptance items.\n\nWrite the intended outcome before choosing an API method. For a presentation change, identify the client, feature description and users whose view should change. For an operational change, obtain the exact device function’s supported procedure and an independent state observation. Do not turn an interface cleanup request into an undocumented hardware configuration change.\nCapture the current feature response and the permitted client view. Apply only the approved on-screen visibility operation through its supported interface, then retrieve the feature response and inspect the client again. Record which option is present or absent. Avoid naming the result hardware disabled unless the separately approved operation and observation establish that conclusion.\nIf the task includes changing the underlying function, perform that as its own authorized step and retain its evidence independently of the visibility change. Review other permitted management paths with the responsible owner when access restrictions are part of the requirement. Resolve any mismatch between presentation, operational state and access policy instead of treating a hidden control as a substitute for those checks.\n\nVerification and evidence\nRetain the feature name, before-and-after description responses, approved visibility action and permitted client screenshots. Keep any independent device-state result alongside its own supported operation. Ask another reviewer to identify exactly what the on-screen evidence proves and what remains untested.\nUse a proposed desk case in which an operator closes a hardware-disable request with only a screenshot of a missing button. Require the reviewer to request the missing operational evidence. These checks do not report a tested device state or establish a security boundary across every management path.\nOfficial references\n\nOn-screen controls — Axis Communications; official VAPIX documentation.\n\nSource review completed October 29, 2026. Recheck the official documentation and the deployed device’s capabilities before changing production settings.", "content_markdown": "Bottom line: Review a feature’s visibility separately from its operational state. When an on-screen option is hidden, require the appropriate device-operation evidence before claiming that the underlying function has been disabled.\n\n## Source fact: documented behavior\n\nAxis’s [On-screen controls](https://developer.axis.com/vapix/network-video/on-screen-controls/) provides feature descriptions through its CGI and includes separate operations for displaying or hiding a feature’s enable/disable option.\n\nThe show/hide example does not require removing the feature; a disabled feature is omitted from the response to a feature request.\n\n## What the source does not establish\n\nDo not accept an absent button or feature-list entry as sufficient proof of the hardware’s state. Do not infer that hiding a control changes account permissions or blocks another management interface. Confirm the exact application and product support, and keep visibility policy separate from the approved procedure for changing the device function.\n\n## Applicability questions\n\n- Is the request to hide an option or to change an actual device operation?\n\n- Which on-screen feature name and client presentation are in scope?\n\n- Which supported operation and observation establish the underlying function’s state?\n\n- Who approves the visibility policy and any separate operational change?\n\n## DSE recommendation: controlled next steps\n\nThe following steps are DSE recommendations based on the cited source.\n\nDSE recommends recording presentation and device-operation requirements as separate acceptance items.\n\n- Write the intended outcome before choosing an API method. For a presentation change, identify the client, feature description and users whose view should change. For an operational change, obtain the exact device function’s supported procedure and an independent state observation. Do not turn an interface cleanup request into an undocumented hardware configuration change.\n\n- Capture the current feature response and the permitted client view. Apply only the approved on-screen visibility operation through its supported interface, then retrieve the feature response and inspect the client again. Record which option is present or absent. Avoid naming the result hardware disabled unless the separately approved operation and observation establish that conclusion.\n\n- If the task includes changing the underlying function, perform that as its own authorized step and retain its evidence independently of the visibility change. Review other permitted management paths with the responsible owner when access restrictions are part of the requirement. Resolve any mismatch between presentation, operational state and access policy instead of treating a hidden control as a substitute for those checks.\n\n## Verification and evidence\n\nRetain the feature name, before-and-after description responses, approved visibility action and permitted client screenshots. Keep any independent device-state result alongside its own supported operation. Ask another reviewer to identify exactly what the on-screen evidence proves and what remains untested.\n\nUse a proposed desk case in which an operator closes a hardware-disable request with only a screenshot of a missing button. Require the reviewer to request the missing operational evidence. These checks do not report a tested device state or establish a security boundary across every management path.\n\n## Official references\n\n- [On-screen controls](https://developer.axis.com/vapix/network-video/on-screen-controls/) — Axis Communications; official VAPIX documentation.\n\nSource review completed October 29, 2026. Recheck the official documentation and the deployed device’s capabilities before changing production settings." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/distinguish-an-axis-on-screen-option-from-its-device-operation/", "url": "https://update.dsesecurity.com/updates/distinguish-an-axis-on-screen-option-from-its-device-operation/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-10-29" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/distinguish-an-axis-on-screen-option-from-its-device-operation/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "IT", "item": "https://update.dsesecurity.com/topic/it/" }, { "@type": "ListItem", "position": 3, "name": "Distinguish an Axis on-screen option from its device operation", "item": "https://update.dsesecurity.com/updates/distinguish-an-axis-on-screen-option-from-its-device-operation/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/distinguish-an-axis-on-screen-option-from-its-device-operation/#article", "identifier": "https://update.dsesecurity.com/updates/distinguish-an-axis-on-screen-option-from-its-device-operation/", "url": "https://update.dsesecurity.com/updates/distinguish-an-axis-on-screen-option-from-its-device-operation/", "headline": "Distinguish an Axis on-screen option from its device operation", "description": "Treat Axis on-screen feature visibility as a presentation decision. Verify the underlying device operation separately instead of using a missing control…", "abstract": "Treat Axis on-screen feature visibility as a presentation decision. Verify the underlying device operation separately instead of using a missing control as proof that hardware is disabled.", "articleBody": "Bottom line: Review a feature’s visibility separately from its operational state. When an on-screen option is hidden, require the appropriate device-operation evidence before claiming that the underlying function has been disabled.\nSource fact: documented behavior\nAxis’s On-screen controls provides feature descriptions through its CGI and includes separate operations for displaying or hiding a feature’s enable/disable option.\nThe show/hide example does not require removing the feature; a disabled feature is omitted from the response to a feature request.\nWhat the source does not establish\nDo not accept an absent button or feature-list entry as sufficient proof of the hardware’s state. Do not infer that hiding a control changes account permissions or blocks another management interface. Confirm the exact application and product support, and keep visibility policy separate from the approved procedure for changing the device function.\nApplicability questions\n\nIs the request to hide an option or to change an actual device operation?\nWhich on-screen feature name and client presentation are in scope?\nWhich supported operation and observation establish the underlying function’s state?\nWho approves the visibility policy and any separate operational change?\n\nDSE recommendation: controlled next steps\nThe following steps are DSE recommendations based on the cited source.\nDSE recommends recording presentation and device-operation requirements as separate acceptance items.\n\nWrite the intended outcome before choosing an API method. For a presentation change, identify the client, feature description and users whose view should change. For an operational change, obtain the exact device function’s supported procedure and an independent state observation. Do not turn an interface cleanup request into an undocumented hardware configuration change.\nCapture the current feature response and the permitted client view. Apply only the approved on-screen visibility operation through its supported interface, then retrieve the feature response and inspect the client again. Record which option is present or absent. Avoid naming the result hardware disabled unless the separately approved operation and observation establish that conclusion.\nIf the task includes changing the underlying function, perform that as its own authorized step and retain its evidence independently of the visibility change. Review other permitted management paths with the responsible owner when access restrictions are part of the requirement. Resolve any mismatch between presentation, operational state and access policy instead of treating a hidden control as a substitute for those checks.\n\nVerification and evidence\nRetain the feature name, before-and-after description responses, approved visibility action and permitted client screenshots. Keep any independent device-state result alongside its own supported operation. Ask another reviewer to identify exactly what the on-screen evidence proves and what remains untested.\nUse a proposed desk case in which an operator closes a hardware-disable request with only a screenshot of a missing button. Require the reviewer to request the missing operational evidence. These checks do not report a tested device state or establish a security boundary across every management path.\nOfficial references\n\nOn-screen controls — Axis Communications; official VAPIX documentation.\n\nSource review completed October 29, 2026. Recheck the official documentation and the deployed device’s capabilities before changing production settings.", "datePublished": "2026-10-29T19:49:52+00:00", "dateModified": "2026-10-29T19:50:08+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/distinguish-an-axis-on-screen-option-from-its-device-operation/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/distinguish-an-axis-on-screen-option-from-its-device-operation/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/physical-security-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/physical-security-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Distinguish an Axis on-screen option from its device operation" }, "articleSection": [ "IT", "Video Surveillance" ], "keywords": [ "IT", "Video Surveillance", "Guide", "Advisory priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" }, { "@type": "Thing", "name": "Video Surveillance", "url": "https://update.dsesecurity.com/topic/video-surveillance/" } ], "wordCount": 503, "timeRequired": "PT3M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Axis Communications — On-screen controls", "url": "https://developer.axis.com/vapix/network-video/on-screen-controls/" } } ] } }