Ciao Tzafrir,

> The only real benefit is if you can limit the permissions you give to
> that specific manager user. But there's a limit to ohw useful this can
> be. Even "write=command" alone allows changing the dialplan ('dialplan
> add' / 'dialplan remove') and running an arbitrary command as the
> asterisk user (originate a call to the application System).

Maybe it could be good to limit in manager.conf which commands can be executed
by each user.

In this way, we could give more granular permissions, at the price of a
slightly more complex manager.conf syntax.

HND,

-- 
Dr. Andrea Spadaccini
Multimedia Technologies Institute - MTI S.r.l.
Web: www.x-voice.it - Tel: +39 (0) 95 7224945

_______________________________________________
--Bandwidth and Colocation Provided by http://www.api-digital.com--

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Reply via email to