[asterisk-bugs] [Asterisk 0011123]: [patch] Implement asterisk CLI permissions.

[noreply at bugs.digium.com]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=11123 
====================================================================== 
Reported By:                eliel
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   11123
Category:                   Core-General
Reproducibility:            always
Severity:                   feature
Priority:                   normal
Status:                     new
Asterisk Version:            SVN 
SVN Branch (only for SVN checkouts, not tarball releases):  trunk 
SVN Revision (number only!): 87627 
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             10-30-2007 13:50 CDT
Last Modified:              11-27-2007 23:55 CST
====================================================================== 
Summary:                    [patch] Implement asterisk CLI permissions.
Description: 
Restrict users to run only a subset of commands allow (configured by an
administrator).
You need write access to the asterisk.ctl socket file.
This is useful when you need to allow run commands on the asterisk CLI to
some users for support purposes also is a secure manner to prevent commands
like 'restart now' or 'stop now' being executed by mistake. 
====================================================================== 

---------------------------------------------------------------------- 
 IgorG - 11-27-07 23:55  
---------------------------------------------------------------------- 
Impressive work, eliel! I have tested for a while and have following
suggestions:

- After I have entered under user I have message: "You don't have
permissions to run 'logger mute silent' command". ?his command
automatically and must be run even we have not permission on it, I think
- On Tab auto completion I have list of all commands, I think here must be
only commands allowed to user
- Also we have special command "help" which I think must be auto allowed
for getting help on allowed command

That's all for now. Thank you again. 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
11-27-07 23:55  IgorG          Note Added: 0074460                          
======================================================================