How to hide elements from datamodel using NACM?

[temabeloglinski]

Hi Team!
I have a question about NACM and how to hide yang configuration in cli.
My NACM config in CLIXON include this parametrs:

set nacm read-default deny
set nacm write-default deny
set nacm exec-default permit
set nacm group administrator
set nacm group administrator user-name admin
set nacm rule-list 2
set nacm rule-list 2 group administrator
set nacm rule-list 2 rule 4
set nacm rule-list 2 rule 4 module-name clixon-cli
set nacm rule-list 2 rule 4 path /oc-sys:contexts/oc-sys:context[name='sample']
set nacm rule-list 2 rule 4 access-operations read
set nacm rule-list 2 rule 4 action permit
set nacm rule-list 2 rule 8
set nacm rule-list 2 rule 8 module-name clixon-cli
set nacm rule-list 2 rule 8 path /oc-sys:contexts/oc-sys:context[name='sample']
set nacm rule-list 2 rule 8 access-operations update
set nacm rule-list 2 rule 8 action permit

If I use the command "show configuration cli", the necessary configuration blocks are hidden.
But if I use the command "set", then all the commands of the first level of the configuration are displayed, which are not in the command "show configuration cli".

How to solve this problem?

For example:

admin@cli /> set ?
context
nacm
system
admin@cli /> set

I would like to leave only the command "context" to display

[olofhagsand]

Need some investigation on NACM paths + CLI.

[olofhagsand]

Opened a separate issue where the CLI+NACM path errors are summarized #468

[temabeloglinski]

Hi Olof!
Is there a solution for this problem?