topic set-access-rule - API in API / CLI Discussion

set-access-rule - API

Joshua_Boerum — Thu, 07 Jul 2016 14:54:53 GMT

I was looking at moving a rule from position 1 to 3 with the following:

{

"uid": "rule-uid-here",

"layer" : "Network",

"new-position" : 3,

"details-level" : "full"

}

Response: 400 Bad Request

{

"code": "generic_err_invalid_parameter",

"message": "new-position parameter temporarily unsupported"

}

Is there a way I can simply move rules around without deleting/adding them?

Originally, instead of using "new-position" : 3, I was using "position" : 3, which returns a status 200 OK but was not moving the rule. Should it be returning status 200 OK when using "position"?

Re: set-access-rule - API

Uri_Bialik — Thu, 07 Jul 2016 15:33:43 GMT

Hi Joshua,

The set-access-rule API does not have a "new-position" or "position" arguments. See https://sc1.checkpoint.com/documents/R80/APIs/index.html#web/set-access-rule

Unfortunately, you cannot re-position a rule using the existing APIs. This is a feature that we'd like to add to one of the upcoming releases.

Re: set-access-rule - API

Václav_Brožík — Sun, 14 Aug 2022 16:21:59 GMT

That is weird. In the documentation you have the "new-position" argument since the API v1:

https://sc1.checkpoint.com/documents/latest/APIs/index.html#set-access-rule~v1%20

Is it a mistake in the documentation?

I am currently using this argument with R81.10 (API v1.8).

Re: set-access-rule - API

Chris_Atkinson — Mon, 15 Aug 2022 01:38:00 GMT

There is definitely no argument named simply "position" in the syntax of "set access-rule" API.

Testing a quick example via MGMT CLI in R81.10 works as expected otherwise i.e.

set access-rule rule-number 2 new-position 1 layer "Network" --format json