Hello,
Someone know how to edit permissions of spesific class to allow show and deny editing under the same hierarchy
for example:
allow:
show configuration routing-options static | display set
deny:
set routing-options static route 0.0.0.0/0 next-hop 172.16.15.1
EX4200 version 11.4R5.7
My corrent configuration:
set system login class CLASS idle-timeout 30
set system login class CLASS permissions control
set system login class CLASS permissions firewall
set system login class CLASS permissions interface-control
set system login class CLASS permissions network
set system login class CLASS permissions rollback
set system login class CLASS permissions routing
set system login class CLASS permissions view
set system login class CLASS permissions view-configuration
set system login class CLASS allow-commands "configure private|edit private|noop-command"
set system login class CLASS deny-configuration-regexps chassis
set system login class CLASS deny-configuration-regexps access
set system login class CLASS deny-configuration-regexps accounting-options
set system login class CLASS deny-configuration-regexps apply-groups
set system login class CLASS deny-configuration-regexps forwarding-options
set system login class CLASS deny-configuration-regexps groups
set system login class CLASS deny-configuration-regexps policy-options
set system login class CLASS deny-configuration-regexps protocols
set system login class CLASS deny-configuration-regexps services
set system login class CLASS deny-configuration-regexps snmp
set system login class CLASS deny-configuration-regexps system
set system login class CLASS deny-configuration-regexps ethernet-switching-options
set system login class CLASS deny-configuration-regexps routing-options
set system login class CLASS deny-configuration-regexps poe
set system login class CLASS deny-configuration-regexps routing-instances