In the EMA, navigate to All > OAM > Local Auth > Rule-list > Cmdrule.

The window Cmdrule appears, with the table Cmdrule List.

Figure 1: Cmdrule window

Select a Rule-list from the drop-down menu Rule-list.


The selected Rule-list appears in the table Cmdrule List.


The parameters (presented as columns) in the table Cmdrule List are:

Table 1: Cmdrule List Parameters

 ColumnDescription
NameArbitrary name assigned to the rule.
ContextThis leaf matches if it has the value * or if its value identifies the agent that is requesting access, i.e., cli for CLI and webui for Web UI. The string * means any of the Context can be associated with this rule.
CommandSpace-separated tokens representing the command.
Access-operations

Access operations associated with this rule.

This leaf matches if it has the value * or if the bit corresponding to the required operation is set.

ActionThe access control action associated with the rule. If a rule is determined to match a particular request, then this object is said to determine whether to permit or deny the request.
CommentText description of the access rule.

Edit Cmdrule

To edit a Cmdrule, select it in the table Cmdrule List.


The frame Edit Selected Cmdrule appears below the table Cmdrule List.


The fields in this frame are same as that of the table Cmdrule List. For brief descriptions of the fields, see the table in the previous section.

 Make necessary changes and click Save, to save all the changes made. Click Undo Edits to cancel all modifications made since the last saved configuration.

On saving the changes successfully, the Success message appears.


Create new Cmdrule

To create new Cmdrule, select a Rule-list from the drop-down menu Rule-list, that does not belongs to any one of the following Groups:

  • Administrator
  • Operator
  • FieldService
  • Guest
  • Calea
  • SecurityAuditor


For more details on Rule-list and Group, refer to Local Auth - Rule-list and Local Auth - Group respectively.

Choosing the option All Rule-lists from the drop-down menu Rule-list does not allow access to the button New Cmdrule.

 Click the button New Cmdrule.


The frame Create New Cmdrule appears.


The fields in this frame are same as that of the table Cmdrule List. For brief descriptions of the fields, see the table in the previous section.

 Make necessary changes and click Save, to save all the changes made. Click Undo Edits to cancel all modifications made since the last saved configuration.

On saving the changes successfully, the Success message appears.

Users are not allowed to create a New Cmdrule if the Cmdrule corresponds to a Rule-list that belongs to any one of the following groups:

  • Administrator
  • Operator
  • FieldService
  • Guest
  • Calea
  • SecurityAuditor

For example, 589 is a Cmdrule, for which the corresponding Rule-list is CMD-100. It belongs to the Group Administrator. An attempt to create the Cmdrule 589 results in the following Error message:

Copy Cmdrule

To copy a Cmdrrule, from the drop-down menu Rule-list, select a Rule-list that does not belongs to any one of the following Groups:

  • Administrator
  • Operator
  • FieldService
  • Guest
  • Calea
  • SecurityAuditor

For more details on Rule-list and Group, refer to Local Auth - Rule-list and Local Auth - Group respectively.


Select the appropriate Cmdrule from the table Cmdrule List. Click the button Copy Cmdrule.


The frame Copy Selected Cmdrule appears below the table Cmdrule List.


The fields in this frame are same as that of the columns in the table Cmdrule List. For brief description of the fields, refer to the table in the first section.

 Make the necessary changes and click Save, to save the changes made. Click the button Undo Edits to cancel all changes made since the last saved configuration.

On saving the changes successfully, the Success message appears.


Users are not allowed to copy a Cmdrule and create a new Cmdrule with some or all configurations different, if the Cmdrule corresponds to a Rule-list that belongs to any one of the following groups:

  • Administrator
  • Operator
  • FieldService
  • Guest
  • Calea
  • SecurityAuditor

For example, 100 is one such Cmdrule, for which the corresponding Rule-list is CMD-100. It belongs to the Group Administrator. An attempt to copy the Cmdrule 100 results in the following Error message:

 Reorder Cmdrule

To reorder a Cmdrule, from the drop-down menu Rule-list.

Select the appropriate Cmdrule from the table Cmdrule List. Click the button Reorder Cmdrule.

The frame Reorder Cmdrule appears below the table Cmdrule List.


This frame contains a drop-down menu, which presents the possible destinations of the Cmdrule selected for reordering. The possible destinations are:

  • after
  • before
  • to the first place
  • to the last place

If the chosen destination is after or before, the SBC asks the user to provide the Cmdrule, after/before which the selected Cmdrule is to be placed. In this case, the appearance of the frame Reorder Cmdrule changes slightly.


If the chosen destination is to the first place or to the last place, the appearance of the frame remains the same.


Make the necessary changes and click Save, to save the changes made. Click the button Undo Edits to cancel all changes made since the last saved configuration.

On saving the changes successfully, the Success message appears.


  • No labels