Scott Lawrence wrote:
>Subject: Re: [sipx-users] "forward calls external" permission > >On Sat, 2010-02-20 at 23:35 -0600, Josh Patten wrote: >> I know there was talk a while back about permissions >relating to call >> forwarding but I need to know for future reference: Will the >"forward >> calls external" permission ever be brought back? There is a >legitimate >> need for this feature to prevent what I like to call >"willful internal >> toll fraud" (user sets call forwarding on their desk number >from their >> house to a long distance number and dials their desk number >from their >> home phone which is then forwarded to the long distance >number so the >> home number isn't charged long distance). As you have probably >> guessed, this has happened before. >> >> I'm pretty sure if the higher-ups found out that I couldn't restrict >> this they would be inclined to either find another solution >or put the >> whole project on hold. Perhaps there is a better way that >I'm not aware of? > >It would be possible to bring that back by creating a >permission that prevents forwarding right in the configuration >UI (for example, by requiring that calls are forwarded only to >known internal endpoints), but that would also prevent that >same user from forwarding a call to his/her home or cell phone. > >Ultimately, the mis-use you describe is essentially the same >as that same user using a remote SIP phone (or just coming >into the office after >hours) to make a call through your system. If you were to >restrict the ability of that user to make that call from the >office phone, then the forwarding wouldn't work either, but >that person might not be able to do their job. Some kinds of >employee theft have to be dealt with at the social rather than >the technical level. > >I believe that the new and improved CDRs will make this much >easier to spot, incidentally. > > I wonder if maybe introducing a User, time based set of permissions might help in this situation. So for example user A has long distance permissions between the hours of 7 a.m. to 6 p.m. but not after that time. Not sure of the complexity involved in implementing this, just throwing out the idea off the top of my head. _______________________________________________ sipx-users mailing list [email protected] List Archive: http://list.sipfoundry.org/archive/sipx-users Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users sipXecs IP PBX -- http://www.sipfoundry.org/
