[asterisk-bugs] [Asterisk 0011123]: [branch] Implement asterisk CLI permissions.

Asterisk Bug Tracker noreply at bugs.digium.com
Tue Oct 7 13:26:14 CDT 2008


A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=11123 
====================================================================== 
Reported By:                eliel
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   11123
Category:                   Core/NewFeature
Reproducibility:            always
Severity:                   feature
Priority:                   normal
Status:                     ready for testing
Asterisk Version:           SVN 
SVN Branch (only for SVN checkouts, not tarball releases):  trunk 
SVN Revision (number only!): 118464 
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             2007-10-30 13:50 CDT
Last Modified:              2008-10-07 13:26 CDT
====================================================================== 
Summary:                    [branch] Implement asterisk CLI permissions.
Description: 
Restrict users to run only a subset of commands allow (configured by an
administrator).
You need write access to the asterisk.ctl socket file.
This is useful when you need to allow run commands on the asterisk CLI to
some users for support purposes also is a secure manner to prevent commands
like 'restart now' or 'stop now' being executed by mistake. 
====================================================================== 

---------------------------------------------------------------------- 
 (0093313) eliel (manager) - 2008-10-07 13:26
 http://bugs.digium.com/view.php?id=11123#c93313 
---------------------------------------------------------------------- 
permissions.conf is of the form:

[username]
permit=command
permit=command
deny=commad

where command is part or the complete CLI command, like "sip show", "sip"
,etc. and also the hardcoded value "all" to represent every command
(permit=all or deny=all). 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2008-10-07 13:26 eliel          Note Added: 0093313                          
======================================================================




More information about the asterisk-bugs mailing list