diff options
| author | Daniil Baturin <daniil@vyos.io> | 2025-08-28 15:26:19 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-08-28 15:26:19 +0100 |
| commit | 133cb0c65d5aa2ca5a96feba6ab7adc3a8f1de58 (patch) | |
| tree | f395cec0aa9448a3b5d40eeeff361603f1d9b117 /interface-definitions | |
| parent | d30039526bdd718f100a0f62986fb1e139d424f4 (diff) | |
| parent | 021725628c5b6bdb00d9e853c649156813c17e57 (diff) | |
| download | vyos-1x-133cb0c65d5aa2ca5a96feba6ab7adc3a8f1de58.tar.gz vyos-1x-133cb0c65d5aa2ca5a96feba6ab7adc3a8f1de58.zip | |
Merge pull request #4674 from dmbaturin/op-mode-permissions
op-mode: T7745: add a CLI for operator user command permissions
Diffstat (limited to 'interface-definitions')
| -rw-r--r-- | interface-definitions/system_login.xml.in | 52 |
1 files changed, 52 insertions, 0 deletions
diff --git a/interface-definitions/system_login.xml.in b/interface-definitions/system_login.xml.in index a13ba10ea..6b1493cde 100644 --- a/interface-definitions/system_login.xml.in +++ b/interface-definitions/system_login.xml.in @@ -8,6 +8,38 @@ <priority>400</priority> </properties> <children> + <tagNode name="operator-group"> + <properties> + <help>Operator group</help> + <constraint> + #include <include/constraint/login-username.xml.i> + </constraint> + <constraintErrorMessage>Operator group name contains illegal characters or\nexceeds 100 character limitation.</constraintErrorMessage> + </properties> + <children> + <node name="command-policy"> + <properties> + <help>Command policy</help> + </properties> + <children> + <leafNode name="allow"> + <properties> + <multi/> + <help>Command subtree allowed to execute</help> + <valueHelp> + <format>txt</format> + <description>Exact command (e.g., 'show interfaces')</description> + </valueHelp> + <valueHelp> + <format>txt</format> + <description>Command wildcard (e.g., '* vpn')</description> + </valueHelp> + </properties> + </leafNode> + </children> + </node> + </children> + </tagNode> <tagNode name="user"> <properties> <help>Local user account information</help> @@ -17,6 +49,26 @@ <constraintErrorMessage>Username contains illegal characters or\nexceeds 100 character limitation.</constraintErrorMessage> </properties> <children> + <node name="operator"> + <properties> + <help>Restrict the user to operational mode</help> + </properties> + <children> + <leafNode name="group"> + <properties> + <multi/> + <help>Operator group</help> + <completionHelp> + <path>system login operator-group</path> + </completionHelp> + <valueHelp> + <format>txt</format> + <description>Operator group name</description> + </valueHelp> + </properties> + </leafNode> + </children> + </node> <node name="authentication"> <properties> <help>Authentication settings</help> |