Q. Can read-only users acknowledge devices using the HTTP API?

A. API acks are only allowed for "FullWebAccess" or "Administrator" users, which means that only users with other rights to edit things can acknowledge devices over the web. This is more restrictive than InterMapper RemoteAccess, and we did that on purpose to protect those customers who have exposed the web interface assuming that it will be truly read-only.