experiments/clixon
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fixed: [Cannot create or modify NACM data node access rule with path using JSON encoding #129](https://github.com/clicon/clixon/issues/129). The evaluation of NACM datanode rule path is assumed to be canonical namespace and cannot be overruled with xmlns rules.

Browse source
This commit is contained in:
Olof hagsand 2020-08-30 17:03:49 +02:00
parent 043acb6a54
commit 41ac192362
7 changed files with 87 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

8
test/test_nacm_datanode.sh
View file

@ -132,8 +132,8 @@ RULES=$(cat <<EOF
<group>guest</group>
<rule>
<name>deny-nacm</name>
<path xmlns:n="urn:ietf:params:xml:ns:yang:ietf-netconf-acm">
/n:nacm
<path xmlns:nacm="urn:ietf:params:xml:ns:yang:ietf-netconf-acm">
/nacm:nacm
</path>
<access-operations>*</access-operations>
<action>deny</action>
@ -147,8 +147,8 @@ RULES=$(cat <<EOF
<group>limited</group>
<rule>
<name>permit-acme-config</name>
<path xmlns:acme="http://example.com/ns/netconf">
/acme:acme-netconf/acme:config-parameters
<path xmlns:ex="http://example.com/ns/netconf">
/ex:acme-netconf/acme:config-parameters
</path>
<access-operations>
read create update delete