topic Re: Access section name is not unique in API / CLI Discussion

Access section name is not unique

Dmitriy2 — Wed, 07 Feb 2024 13:35:34 GMT

Hello,

I have a large policy with many access sections and my goal is to add/edit a rule in a certain section. Before adding a rule, I have to make sure if there is access section with a specific name or not. There is a problem when there are several sections with the same name in the policy. In this case, when searching for a access section, I get the error "Requested object name [name] is not unique." instead of finding out its uid.

For example, I have sections with rules:

AAAA

BBBB

CCCC

AAAA

DDDD

Request:

https://x.x.x.x/web_api/show-access-section { "name": "AAAA", "layer": "Policy Network" }

Responce:

{ "code": "generic_err_object_field_not_unique", "message": "Requested object name [AAAA] is not unique." }

In this case, I cannot find out the uid of the access section and also cannot add a rule to the "AAAA" access section by its name since it is not unique. Is there a way to add a rule to the first access section named "AAAA"?

Re: Access section name is not unique

PhoneBoy — Fri, 16 Feb 2024 19:19:24 GMT

Even though the access sections have the same name, they will have unique UIDs, which should be used in this case.
You may need to parse the rulebase with show access-layer to find the correct one.

Re: Access section name is not unique

the_rock — Fri, 16 Feb 2024 19:51:54 GMT

I guess thats expected, not sure. I get exact same thing.

Andy

{
  "code" : "generic_err_missing_session_id",
  "message" : "No query parameters are found"
}