search

clicon / clixon

YANG-based toolchain including NETCONF and RESTCONF interfaces and an interactive CLI
http://www.clicon.org/
Other
208 stars 70 forks source link

How to hide elements from datamodel using NACM? #463

Open temabeloglinski opened 10 months ago

temabeloglinski commented 10 months ago

Hi Team! I have a question about NACM and how to hide yang configuration in cli. My NACM config in CLIXON include this parametrs:

set nacm read-default deny set nacm write-default deny set nacm exec-default permit set nacm group administrator set nacm group administrator user-name admin set nacm rule-list 2 set nacm rule-list 2 group administrator set nacm rule-list 2 rule 4 set nacm rule-list 2 rule 4 module-name clixon-cli set nacm rule-list 2 rule 4 path /oc-sys:contexts/oc-sys:context[name='sample'] set nacm rule-list 2 rule 4 access-operations read set nacm rule-list 2 rule 4 action permit set nacm rule-list 2 rule 8 set nacm rule-list 2 rule 8 module-name clixon-cli set nacm rule-list 2 rule 8 path /oc-sys:contexts/oc-sys:context[name='sample'] set nacm rule-list 2 rule 8 access-operations update set nacm rule-list 2 rule 8 action permit

If I use the command "show configuration cli", the necessary configuration blocks are hidden. But if I use the command "set", then all the commands of the first level of the configuration are displayed, which are not in the command "show configuration cli".

How to solve this problem?

For example:

admin@cli /> set ? context
nacm system admin@cli /> set

I would like to leave only the command "context" to display

olofhagsand commented 9 months ago

Need some investigation on NACM paths + CLI.

olofhagsand commented 9 months ago

Opened a separate issue where the CLI+NACM path errors are summarized https://github.com/clicon/clixon/issues/468

temabeloglinski commented 4 months ago

Hi Olof! Is there a solution for this problem?