A computer-implemented method for securing access to configuration information stored in data models in a home network environment having at least one control point and at least one control device, the method comprising: by the at least one control device receiving, from a control point, a request to operate on at least one node of a data model, wherein the data model includes a plurality of nodes, where each of the plurality of nodes represents configuration information; determining a role associated with the control point based on the received request; determining whether the role associated with the control point is in a recommended role list associated with the received request; allowing, if the role associated with the control point is in the recommended role list associated with the received request, the control point to operate on the at least one node of the data model; determining, if the role associated with the control point is not in the recommended role list associated with the received request, whether the control point has a role appropriate for operating with respect to the at least one node of the data model based on Access Control List, ACL, data associated with each of the at least one node; allowing, if the control point has a role appropriate for operating with respect to the at least one node of the data model based on the ACL data associated with each of the at least one node, the control point to operate on the at least one node of the data model; and returning, if the control point does not have a role appropriate for operating with respect to the at least one node of the data model based on the ACL data associated with each of the at least one node, an error message on a display of the control point. by the at least one control device receiving, from a control point, a request to operate on at least one node of a data model, wherein the data model includes a plurality of nodes, where each of the plurality of nodes represents configuration information; determining a role associated with the control point based on the received request; determining whether the role associated with the control point is in a recommended role list associated with the received request; allowing, if the role associated with the control point is in the recommended role list associated with the received request, the control point to operate on the at least one node of the data model; determining, if the role associated with the control point is not in the recommended role list associated with the received request, whether the control point has a role appropriate for operating with respect to the at least one node of the data model based on Access Control List, ACL, data associated with each of the at least one node; allowing, if the control point has a role appropriate for operating with respect to the at least one node of the data model based on the ACL data associated with each of the at least one node, the control point to operate on the at least one node of the data model; and returning, if the control point does not have a role appropriate for operating with respect to the at least one node of the data model based on the ACL data associated with each of the at least one node, an error message on a display of the control point.