On Sep 7, 2012, at 1:49 AM, Johan Wilfer wrote:
> Hi!
>
> I'm trying to limit the permissions for a AMI-account. But I'm a little bit
> confused by the permissions. The commands I use are (output from "manager
> show commands", btw: privilege col seems cropped?):
Yes, sadly it is.
> Action Privilege Synopsis
> Redirect call,all Redirect (transfer) a call.
> Originate originate,all Originate a call.
> Getvar call,reporting, Gets a channel variable.
>
>
> If I put this in my manager.conf:
>
> [pbx_ami]
> secret = ***
> deny=0.0.0.0/0.0.0.0
> permit = x.x.x.x/255.255.255.255
> write=originate,call
> read=
>
>
> I get this ("manager show user pbx_ami"):
>
> username: pbx_ami
> secret: <Set>
> acl: yes
> read perm: <none>
> write perm: call,originate,all
> displayconnects: yes
>
> Where does the "all" permission come from?
Probably just a bug in the 'manager show user' command. The user doesn't have
all the permissions, so 'all' shouldn't show up in the list. If it's not
already in the issue tracker, please file a bug[1].
[1]: https://wiki.asterisk.org/wiki/display/AST/Asterisk+Issue+Guidelines
> However, If I change the row in manager.conf to "write=originate,call,all"
> the output is:
>
> username: pbx_ami
> secret: <Set>
> acl: yes
> read perm: <none>
> write perm:
> system,call,log,verbose,command,agent,user,config,dtmf,reporting,cdr,dialplan,originate,agi,cc,aoc,test,all
> displayconnects: yes
>
> Can someone explain this please?
This is at least looks correct. The 'all' permission is a superset of, well,
all the permissions. The 'write=all' line in manager.conf assigns all of these
permissions to the user.
> Thanks!
>
> --
> Johan Wilfer
--
David M. Lee
Digium, Inc. | Software Developer
445 Jan Davis Drive NW - Huntsville, AL 35806 - USA
Check us out at: www.digium.com & www.asterisk.org
--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
http://www.asterisk.org/hello
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users
