[API] Does the cli_wallet have its own permission file / do I need to login?

[theoretical]

The CLI wallet can use server-rpc-user and server-rpc-password on the command line or in the config file allow you to specify how it authenticates as a client to the witness_node.  All the functions the cli_wallet uses are public with the default witness_node configuration, so this is not necessary unless you have created an apiaccess file to change your witness_node's authentication policy.

[xeroc]

nop .. the cli RPC is open if you authenticated against RPC ..

[monsterer]

I've finally got the witness_node permission working and I'm wondering do I have a similar procedure with the cli_wallet?

I.e. login, request api usage? If so, where does the config file live so I can specify the permissions?