topic Re: where-used command needs more than read-only all privileges ? in API / CLI Discussion

where-used command needs more than read-only all privileges ?

Gongya_Yu — Sat, 21 Oct 2023 21:28:32 GMT

I like to use where-used the command, but the my API account only has read-only privilege. I read to know publish is removed from version 81.

Can I use it with read-only all privilege ?

thanks !!

Re: where-used command needs more than read-only all privileges ?

Tomer_Noy — Mon, 23 Oct 2023 12:46:32 GMT

Looks like this was a bug that was introduced in one of the JHF takes. The latest R81.20 JHF (that was released as ongoing today) has a solution for this issue.

More info is available in: https://support.checkpoint.com/results/sk/sk181471

Re: where-used command needs more than read-only all privileges ?

Gongya_Yu — Mon, 23 Oct 2023 14:55:36 GMT

thanks so much!

On our 81.20, I got the following with the read-only all account

[Expert@sms-uwt:0]# mgmt_cli where-used name hunt
Username: xxxxxx
Password: **********
code: "generic_error"
message: "Null Pointer exception: null"

This is definitely some bug.

But It works on 81.20 vmware.

80.20 has the following for the read-only all account

code: "err_normalization_failed"

message: "Work session was not found. Please verify that you are not in the read-only session mode"

Discarding the changes.

Discard failed, the following error has occurred:

code: "err_normalization_failed"

message: "Work session was not found. Please verify that you are not in the read-only session mode"

Re: where-used command needs more than read-only all privileges ?

Christian_Koehl — Tue, 24 Oct 2023 06:47:39 GMT

You can also use this as a workaround. Please note, this will give write permissions to objects.

Re: where-used command needs more than read-only all privileges ?

Gongya_Yu — Tue, 24 Oct 2023 14:46:00 GMT

thanks !! We already reported this to Checkpoint. We noticed hotfix 26 broke this.