[j-nsp] which permission to set to activate "show configuration | display commit-scripts"

Humair Ali humair.s.ali at gmail.com
Wed Aug 11 11:59:15 EDT 2010


you could use the "allow-command "

might be faster for you than searching through which permission gives you
this commands



On 11 August 2010 14:45, Jeroen Valcke <jeroen.valcke at belnet.be> wrote:

> Hello,
>
> I've created a restricted user class. Basically users in this class
> should only be able to view the configuration and run show commands.
>
> This is the code.
>
>        class student {
>            permissions [ access admin firewall interface network routing
> security snmp system view ];
>        }
>        user student {
>            uid 2300;
>            class student;
>        }
>
> Users in this class can display the configuration (show configuration).
> However we have a lot of code that is generated by commit-scripts. Usage
> of the 'display commit-scripts' command doesn't seem to work with the
> above permissions.
>
> So the option commit-scripts is not available for users in this
> 'student' class.
>
>        student at ar1.kor> show configuration | display ?
>        Possible completions:
>          changed              Tag changes with junos:changed attribute (XML
> only)
>          detail               Show configuration data detail
>          inheritance          Show inherited configuration data and source
> group
>          omit                 Emit configuration statements with the 'omit'
> option
>          set                  Show 'set' commands that create configuration
>          xml                  Show output as XML tags
>
>
> I've went through the documentation on the Juniper site
>
> http://www.juniper.net/techpubs/en_US/junos10.2/topics/concept/access-privileges-levels-overview.html
> but I can't figure out which permission I need to make the display
> command work.
>
> Kind regards,
> -Jeroen-
>
> --
> Jeroen Valcke
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>



-- 
Humair


More information about the juniper-nsp mailing list