[asterisk-bugs] [Asterisk 0014026]: Action: SIPpeers requires write permissions in manager interface

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=14026 
====================================================================== 
Reported By:                nemo
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   14026
Category:                   Core/ManagerInterface
Reproducibility:            always
Severity:                   minor
Priority:                   normal
Status:                     new
Asterisk Version:           1.4.22 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             2008-12-07 17:44 CST
Last Modified:              2008-12-08 11:42 CST
====================================================================== 
Summary:                    Action: SIPpeers requires write permissions in
manager interface
Description: 
Action: IAXpeers works with read access.  By contrast, Action: SIPpeers
requires write access.  I believe that they are both commands which only
involve reading, and therefore I believe SIPpeers should be changed to work
with read-only access.


====================================================================== 

---------------------------------------------------------------------- 
 (0095960) Corydon76 (administrator) - 2008-12-08 11:42
 http://bugs.digium.com/view.php?id=14026#c95960 
---------------------------------------------------------------------- 
You're incorrect as to what it requires.  IAXpeers requires no permission
at all, while SIPpeers requires the SYSTEM privilege.  Given that any
change would not be backwards compatible to previous versions of 1.4 and
since this lack of permissions is not a security issue, it is unlikely to
be changed in 1.4 at all, but it may be changed in trunk to require
equivalent permission in the IAXpeers command. 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2008-12-08 11:42 Corydon76      Note Added: 0095960                          
======================================================================