Scripts cannot run with permission denied V7.13.4

RouterOS Scripting
1

Hello all,
After upgrading to v7.13 from v7.11 the script from dynu is not running with the following error: Couldn’t start task: cannot open file: permission denied
The same script was running the last 5 years without any issue, owner of script is admin with full permissions

Thank you
Simos
mikro2.png
mikro1.png

2

  1. Read changelog before update. And not only the one for the 7.13, but all changelogs between 7.11 and 7.13.

  2. If work, why upgrade?

  3. Add “ftp” policy.

3

We have the similar problem. The difference is that we have an external script which uploads reset.auto.rsc file. We upload file from a user with group full. This file contains:
/system backup save encryption=aes-sha256 password=XXXXXX name=rollback.backup
/system reset-configuration skip-backup=yes no-defaults=yes keep-users=yes run-after-reset=prebackup.rsc

And each line of this script fail with “script error: not enough permissions (9)” error. Our configuration synchronizer is broken. Is there a solution for our issue?

Appreciate for your help.

4

I run the dynu script and do not have ftp policy checked and my script runs without issue.
@rextended ... so why are you stateing point # 3) ?

I have not seen the OP's script .... my dynu script is below:

/system script add dont-require-permissions=no name=Dynu owner=aaaa policy=read,write,policy,test source=":local ddnsuser "zzzzz"
\n:local ddnspass "^XxXxXxXxXxXXXXz"
\n:local ddnshost "blaNNN.myddns.rocks"
\n
\n:local currentIP ([/tool fetch url="> https://api.ipify.org> " as-value output=user]->"data")
\n:local dnsIP [:resolve $ddnshost]
\n:if ($currentIP != $dnsIP) do={
\n :local update "> https://api.dynu.com/nic/update?username=$ddnsuser&password=$ddnspass&hostname=$ddnshost&myip=$currentIP> "
\n /tool fetch url=$update keep-result=no
\n :log info "DYNU $ddnshost updated: old IP was $dnsIP and new IP is $currentIP"
\n}
\n"

5

What I did when facing similar issues was to give the script all permissions (policies) and - when it worked - starting removing them one by one until the script stopped working to find which ones were needed.
I guess it can be defined “permissions brute-forcing” :open_mouth:

In my case it was "/tool traffic-generator inject " command requiring the “sniff” one:
http://forum.mikrotik.com/t/my-gratuitous-arp-script/158056/1

6

Hello all,
FTP is needed to version 7.13 for dynu script to work
Thank you all for your input
mikro3.png

7

Please Suggest me any one how to fix netwatch host script

scrip some text by mask

8

@mozerd

@sims

9

  1. Do not hijack other people topic.

  2. Read changelog before update. And not only the one for the , but all changelogs between and .

  3. If work, why upgrade?

  4. Add “ftp” policy on the script that netwatch call.

10

Brother
can please more explain , where to add ftp policy , i'm too beginner plz help
thanks.....

11

Look at the screenshot on the first post:
http://forum.mikrotik.com/t/scripts-cannot-run-with-permission-denied-v7-13-4/173794/1

Get to that window in Winbox selecting the script.
Tick the box labeled “ftp” next to “Policy:”
Apply.
OK.

12

Hi,

do we have any solution how to make NETWATCH with script work?

13

Hi all,
I got it worked.. Please read this post here http://forum.mikrotik.com/t/netwatch-with-fetch-stopped-working-after-7-13/172865/21

The thing is something changed after the upgrade and Netwatch didn’t have the permissions anymore when calling fetch tool. My solution was to add “output=none” to my script that has a generic Discord webhook.

I hope this helps you too.