0

I just upgraded from an RB850 to RB4011 and discovered my scripts don't run properly. It has something to do with "policy".

Unfortunately the Mikrotik online manual is very poor in describing what 'policy' is and how it works. Can someone explain?

For example, policy on a script. Does that mean the script will attempt to perform actions that require those permissions? And why can I check "Dont' require permissions" and also check permissions (policies)? Aren't they mutually exclusive?

And on the scheduler, I again have to check policies. Is this "granting" these permissions to the script? Or refusing to run if the script doesn't have these same policies?

Confused...

1 Answer 1

1

For example, policy on a script. Does that mean the script will attempt to perform actions that require those permissions?

It means the script will be allowed to perform actions that require these permissions.

And why can I check "Dont' require permissions" and also check permissions (policies)? Aren't they mutually exclusive?

The checkbox is about permissions of the invoking user, not to the script itself.

Normally, the script can only be run by users who have all of the permissions that the script uses. For example, if the script does something which would require the 'sniff' permission, you must also have the 'sniff' permission to run it.

Selecting this option means that even if the user invoking the script doesn't have the required permissions, they can still run the script, and the script will still receive the declared permissions. For example, a 'read'-only user can be allowed to run a script that uses 'write'. (It's like the setuid bit on Linux.)

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .