topic Re: Permission profile just for one inline layer in Firewall and Security Management

Permission profile just for one inline layer

Ivo_Hrbacek — Fri, 09 Feb 2018 10:45:40 GMT

Hi,

playing with profiles and have a question, I have few people who should have read only just to ONE inline layer. I can create profile, see below, and I am using this profile just in this layer. Anyway my user assigned to this profile can see other policies in read only because this way just limit write access. Is there a way how to change this behavior? and allow users to have read only just to one layer?

thx!

layer settings:

profile:

else policy settings:

Re: Permission profile just for one inline layer

PhoneBoy — Sat, 10 Feb 2018 23:04:28 GMT

Just to clarify your question: you only want to allow a specific user to read a specific layer, and not other layers that might be in use, correct?

As far as I know (and https://community.checkpoint.com/people/tomera5b2e7f3-09aa-32f8-96c2-f0f5bfa2988b‌ should be able to confirm), this is not possible at the moment.

Re: Permission profile just for one inline layer

Tomer_Sole — Sun, 11 Feb 2018 08:08:13 GMT

Hi,

With Permissions Per Layer, you can either have:

- Show all policies and edit specific layers

- Show and edit all policies and layers

- Not see any security policy

You cannot limit users from seeing just some of the layers with R80.10 unfortunately.

One workaround that I can offer would be a self service portal which uses the API commands and limits specific users through that portal, but it won't be as part of SmartConsole.

Hope this helps.

Re: Permission profile just for one inline layer

Ivo_Hrbacek — Thu, 07 Jun 2018 13:13:58 GMT

Hello Tomer,

back to this question.. do you have some self service portal code which can be shared and used as a template? I do not want to start from scratch you know

thx

ivo

Re: Permission profile just for one inline layer

PhoneBoy — Fri, 21 Jun 2019 09:15:35 GMT

https://community.checkpoint.com/docs/DOC-2261

Re: Permission profile just for one inline layer

Ivo_Hrbacek — Tue, 12 Jun 2018 07:07:45 GMT

thx

Re: Permission profile just for one inline layer

G_W_Albrecht — Wed, 19 Sep 2018 14:18:52 GMT

Is there any chance that this will be possible in future versions ?

Re: Permission profile just for one inline layer

PhoneBoy — Fri, 21 Sep 2018 17:23:47 GMT

Possibly, but can't commit

Re: Permission profile just for one inline layer

Jonas_Reiter — Wed, 28 Aug 2024 11:49:07 GMT

Is there anything new about this in R82?

Re: Permission profile just for one inline layer

PhoneBoy — Wed, 28 Aug 2024 15:17:53 GMT

As near as I can tell, this is still not possible in R82.
If you have this as a requirement, please bring it through your local Check Point office with an RFE.