In the EMA, navigate to All > OAM > Local Auth > Rule-list > Cmdrule.
The window Cmdrule appears, with the table Cmdrule List.
Caption |
---|
|
|
Select a Rule-list from the drop-down menu Rule-list.
Caption |
---|
0 | Figure |
---|
1 | Rule-list dropdown |
---|
|
|
The selected Rule-list appears in the table Cmdrule List.
Caption |
---|
0 | Figure |
---|
1 | Cmdrule List with Rule-list selected |
---|
|
|
The parameters (presented as columns) in the table Cmdrule List are:
Caption |
---|
0 | Table |
---|
1 | Parameters: Cmdrule List |
---|
|
Column | Description |
---|
Name | Arbitrary name assigned to the rule. | Context | This leaf matches if it has the value * or if its value identifies the agent that is requesting access, i.e., cli for CLI and webui for Web UI. The string * means any of the Context can be associated with this rule. | Command | Space-separated tokens representing the command. | Access-operations | Access operations associated with this rule. This leaf matches if it has the value * or if the bit corresponding to the required operation is set. | Action | The access control action associated with the rule. If a rule is determined to match a particular request, then this object is said to determine whether to permit or deny the request. | Comment | Text description of the access rule. |
|
Edit Cmdrule
To edit a Cmdrule, select it in the table Cmdrule List.
Caption |
---|
0 | Figure |
---|
1 | Select Cmdrule to edit |
---|
|
|
The frame Edit Selected Cmdrule appears below the table Cmdrule List.
Caption |
---|
0 | Figure |
---|
1 | Edit Selected Cmdrule |
---|
|
|
Note |
---|
The fields in this frame are same as that of the table Cmdrule List. For brief descriptions of the fields, see the table in the previous section. |
Make necessary changes and click Save, to save all the changes made. Click Undo Edits to cancel all modifications made since the last saved configuration.
On saving the changes successfully, the Success message appears.
Caption |
---|
|
|
Create new Cmdrule
To create new Cmdrule, select a Rule-list from the drop-down menu Rule-list, that does not belongs to any one of the following Groups:
- Administrator
- Operator
- FieldService
- Guest
- Calea
- SecurityAuditor
Note |
---|
Choosing the option All Rule-lists from the drop-down menu Rule-list does not allow access to the button New Cmdrule. |
Click the button New Cmdrule.
Caption |
---|
0 | Figure |
---|
1 | New Cmdrule button |
---|
|
|
The frame Create New Cmdrule appears.
Caption |
---|
0 | Figure |
---|
1 | Create New Cmdrule |
---|
|
|
Note |
---|
The fields in this frame are same as that of the table Cmdrule List. For brief descriptions of the fields, see the table in the previous section. |
Make necessary changes and click Save, to save all the changes made. Click Undo Edits to cancel all modifications made since the last saved configuration.
On saving the changes successfully, the Success message appears.
Caption |
---|
|
|
Note |
---|
Users are not allowed to create a New Cmdrule if the Cmdrule corresponds to a Rule-list that belongs to any one of the following groups: - Administrator
- Operator
- FieldService
- Guest
- Calea
- SecurityAuditor
For example, 589 is a Cmdrule, for which the corresponding Rule-list is CMD-100 . It belongs to the Group Administrator . An attempt to create the Cmdrule 589 results in the following Error message: Caption |
---|
0 | Figure |
---|
1 | New Cmdrule Error Message |
---|
|
|
|
Copy Cmdrule
To copy a Cmdrrule, from the drop-down menu Rule-list, select a Rule-list that does not belongs to any one of the following Groups:
- Administrator
- Operator
- FieldService
- Guest
- Calea
- SecurityAuditor
Select the appropriate Cmdrule from the table Cmdrule List. Click the button Copy Cmdrule.
Caption |
---|
0 | Figure |
---|
1 | Select Cmdrule to copy |
---|
|
|
Caption |
---|
0 | Figure |
---|
1 | Copy Cmdrule button |
---|
|
|
The frame Copy Selected Cmdrule appears below the table Cmdrule List.
Caption |
---|
0 | Figure |
---|
1 | Copy Cmdrule window |
---|
|
|
Note |
---|
The fields in this frame are same as that of the columns in the table Cmdrule List. For brief description of the fields, refer to the table in the first section. |
Make the necessary changes and click Save, to save the changes made. Click the button Undo Edits to cancel all changes made since the last saved configuration.
On saving the changes successfully, the Success message appears.
Caption |
---|
|
|
Note |
---|
Users are not allowed to copy a Cmdrule and create a new Cmdrule with some or all configurations different, if the Cmdrule corresponds to a Rule-list that belongs to any one of the following groups: - Administrator
- Operator
- FieldService
- Guest
- Calea
- SecurityAuditor
For example, 100 is one such Cmdrule, for which the corresponding Rule-list is CMD-100 . It belongs to the Group Administrator . An attempt to copy the Cmdrule 100 results in the following Error message: Caption |
---|
0 | Figure |
---|
1 | Copy Error message |
---|
|
|
|
Reorder Cmdrule
To reorder a Cmdrule, from the drop-down menu Rule-list.
Select the appropriate Cmdrule from the table Cmdrule List. Click the button Reorder Cmdrule.
Caption |
---|
0 | Figure |
---|
1 | Select Cmdrule for reordering |
---|
|
|
Caption |
---|
0 | Figure |
---|
1 | Reorder Cmdrule button |
---|
|
|
The frame Reorder Cmdrule appears below the table Cmdrule List.
Caption |
---|
0 | Figure |
---|
1 | Reorder Cmdrule window |
---|
|
|
This frame contains a drop-down menu, which presents the possible destinations of the Cmdrule selected for reordering. The possible destinations are:
- after
- before
- to the first place
- to the last place
If the chosen destination is after or before, the SBC asks the user to provide the Cmdrule, after/before which the selected Cmdrule is to be placed. In this case, the appearance of the frame Reorder Cmdrule changes slightly.
Caption |
---|
0 | Figure |
---|
1 | Reorder after/before |
---|
|
|
If the chosen destination is to the first place or to the last place, the appearance of the frame remains the same.
Caption |
---|
0 | Figure |
---|
1 | Reoder first/last |
---|
|
|
Make the necessary changes and click Save, to save the changes made. Click the button Undo Edits to cancel all changes made since the last saved configuration.
On saving the changes successfully, the Success message appears.
Caption |
---|
|
|