Open temabeloglinski opened 10 months ago
Need some investigation on NACM paths + CLI.
Opened a separate issue where the CLI+NACM path errors are summarized https://github.com/clicon/clixon/issues/468
Hi Olof! Is there a solution for this problem?
Hi Team! I have a question about NACM and how to hide yang configuration in cli. My NACM config in CLIXON include this parametrs:
set nacm read-default deny set nacm write-default deny set nacm exec-default permit set nacm group administrator set nacm group administrator user-name admin set nacm rule-list 2 set nacm rule-list 2 group administrator set nacm rule-list 2 rule 4 set nacm rule-list 2 rule 4 module-name clixon-cli set nacm rule-list 2 rule 4 path /oc-sys:contexts/oc-sys:context[name='sample'] set nacm rule-list 2 rule 4 access-operations read set nacm rule-list 2 rule 4 action permit set nacm rule-list 2 rule 8 set nacm rule-list 2 rule 8 module-name clixon-cli set nacm rule-list 2 rule 8 path /oc-sys:contexts/oc-sys:context[name='sample'] set nacm rule-list 2 rule 8 access-operations update set nacm rule-list 2 rule 8 action permit
If I use the command "show configuration cli", the necessary configuration blocks are hidden. But if I use the command "set", then all the commands of the first level of the configuration are displayed, which are not in the command "show configuration cli".
How to solve this problem?
For example:
admin@cli /> set ? context
nacm system admin@cli /> set
I would like to leave only the command "context" to display