Web API read-only login problem

[Denis_Leskovar]

Hi,

I have this weird problem. I am using vRealize orchestrator with JS. 

When I want to login to our R80 checkpoint via script, I only get read only access, even tho I set parameter read-only to false. Here is the JSON I send

{"user":"someRandomUsername","password":"someRandomPassword","continue-last-session":false,"session-timeout":300,"read-only":false}

I can login and I can logout, discard, show-network. I set SID in header and it works in our test enviroment, but on production it fails. Our production environment in more or less the same and using 1.1. version of api. 

When I want to call show-access-rulebase it returns undefined. It is quite large but it shouldn't be a problem because my program waits for the response.

I have no problem and have full read-write access when I login to r80 with SmartConsole,

I have like zero idea what is going wrong, plz help

Thanks

[PhoneBoy]

First of all, if you're using a read-only user, you will not be able to ask for read-write mode

Even so, that parameter shouldn't be necessary unless you are a read-write user and you explicitly want read-only access.

Second, the show-access-rulebase command is, by default, limited to 500 items.

You can request more items, but you will get unpredictable results if you do so.

This means you will need to make multiple show-access-rulebase calls with offset parameters in order to retrieve all the rules.

[HeikoAnkenbrand]

Can this bug or feature with 500 rules be fixed in the next version?

Is there a rational explanation for this?

[PhoneBoy]

The more items an API call has to return, the longer it takes for that API to return a result, the more memory required to provide it, etc.

The limits for the various API calls were chosen to balance those needs.

[HeikoAnkenbrand]

In times of 16 GB RAM.

[Denis_Leskovar]

I am using user with read-write acces, I can use smartconsole with that user without problems.

I am looping through rulebase, using max limit of 500 results. 

[Denis_Leskovar]

Well, I guess there is some weird bug if you have running instance of SmartConsole with same user and opened view of rulebase. Same applies if you add new interface to e.g. VSX, if you open edit window and then run command with vsx_provisioning_tool from SSH with clish, it won't work.

As for 16 gigs of ram. Rulebase of around 400 rules takes around 4 to 5 seconds to retrieve on machine with 16 gigs of ram. I don't know if it is problem with vRealize Orchestrator or is the nature of CP. I didn't test it with other backend.

[_Val_]

Please open a TAC case.